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Trace Port Analyzer for ARM®—At a Glance 


ARM On-Chip Circuitry for Debugging 


The ARM7 and ARM9 families of microprocessors can include an 
Embedded Trace Macrocell (ETM) that outputs information about 
processor execution to a trace port. 


Software debuggers provide the user interface to the ARM ETM; they 
configure the trace port using arun control unit (via the JTAG 
interface), and they display the data collected from the trace port. 
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Trace Port Analyzer for ARM Overview 


The Agilent Technologies E5904B Option 300 trace port analyzer for 
ARM contains: 


e Arun control unit. 


e Circuitry for collecting output from the ARM ETM trace port, called the 
trace port analysis unit. 


e ALAN interface for communicating with debuggers. 


The Run Control Unit 


In addition to configuring the trace port, the run control unit is also 
used for downloading code, starting/stopping processor execution, 
single-stepping through a program, setting breakpoints, and displaying/ 
modifying registers and memory. 


2 Agilent Trace Port Analyzer for ARM 


The Trace Port Analysis Unit 


With the trace port analysis unit, you can: 


Capture ARM ETM trace data. 

Capture data on 4-, 8-, or 16-bit wide trace packet buses. 
Store up to 2M trace states with time tags off. 

Store up to 1M trace states with time tags on. 


Capture data on ARM ETM ports whose voltages are between 1.8 V and 
3.3 V. 


Send a trigger signal or a run control unit status signal to other 
instruments, or use signals received from other test instruments to stop 
processor execution or trigger the trace port analyzer. 


The LAN Interface 
With the IEEE 802.3 Type 10/100Base-TX LAN connection, you can: 


Connect the trace port analyzer to a target system in the lab and use 
debuggers anywhere else on the LAN. 


Connect to either 10 Mbps (LOBASE-T) or 100 Mbps (1L0OBASE-TX) 
twisted-pair ethernet LANs. (The trace port analyzer automatically 
negotiates the data rate for the LAN it is connected to.) 
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Debugger Software 


A debugger must be used with the trace port analyzer. Debuggers are 
available from ARM, Green Hills, and other companies. 


The debugger user interface will let you: 


e Download code, start/stop processor execution, single-step through a 
program, set breakpoints, and display/modify registers and memory. 


e Set triggers, trigger sequences, etc., in the Embedded Trace Macrocell 
using the run control unit of the trace port analyzer. 


e Collect trace information. 


e Display execution flow and captured trace data. 


Processors Supported 


The Agilent Technologies E5904 Option 300 Trace Port Analyzer 
supports the following processors when they include the ARM ETM 
(Embedded Trace Module). 


Processors Supported 
ARM7TDMI 
ARM7DI 
ARM710T 
ARM720T 
ARM740T 
ARM9STDMI 
ARM 920T 
ARM 922T 
ARM 925T 
ARM 940T 
ARM 946ES 
ARM 966ES 


The Agilent E5904B Option 300 Trace Port Analyzer is designed to 
work with ARM ETM revision C. If you are using ARM ETM revision A 
or B, see “Using the Trace Port Analyzer with ARM ETM revisions A or 
B” on page 36. 
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Equipment Supplied 


The Agilent Technologies E5904B Option 300 trace port analyzer for 
ARM consists of: 


Trace Port 


arget 


Probes 


Part number Description 

0950-3043 Power supply for trace port analyzer (marked F1044B) 

E3483-68700 Power supply ferrite kit 

E5903-61602 68-pin cable 

E5903-66507 ARM buffer board 

E5903-66508 ARM dual ETM buffer board 

E5903-66516 ARM ETM revision A/B buffer board - Optional, not shown. 
See page 36 for details. 

E5903-66509 PV board 

E8130-68702 Serial cable and adapter 

E5904-97002 This user's guide 
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In This Book 


This book is for the Agilent Technologies E5904B Option 300 trace port 
analyzer for ARM. It describes: 


e Target system design considerations and other requirements of the trace 
port analyzer. 


e Howto connect the trace port analyzer to a LAN, configure it, and connect 
it to the target system. 


e How to coordinate measurements between the trace port analyzer and 
other test instruments. 


e How to update trace port analyzer firmware. 
e How to troubleshoot and solve problems. 


e Characteristics of the trace port analyzer. 


See Also The user’s guide manual for your debugger. 


Embedded Trace Macrocell Specification and other documentation 
from ARM (see the ARM web site: http:/Awww.arm.com). 
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Target System Design Considerations 


Chapter 1: Target System Design Considerations 


In order to use Agilent Technologies E5904B Option 300 trace port 
analyzer, the ARM7/9 microprocessor must have the Embedded Trace 
Macrocell (ETM), and the Embedded Trace Macrocell trace port 
signals must be routed to a header connector in the target system. 


When integrating an Embedded Trace Macrocell into an ASIC, the 
quality and timing of the trace port signals to the trace port analyzer 
are critical for reliable operation. Some of the ASIC and printed-circuit 
board design issues to consider are: 


e Output pad selection. 
e Printed-circuit board track lengths. 
e Printed-circuit board track termination. 


e Setup and hold times for the trace data signals with respect to 
TRACECLK. 


The care that must be taken with the design of the trace port is 
generally proportional to the frequency of operation. At frequencies of 
more than 100 MHz careful SPICE analysis of the system, including the 
characteristics of the package should ideally be taken into account. 


Early attention to the design guidelines can ensure correct operation of 
the trace port analyzer. 


This chapter describes: 


e A few ASIC design guidelines. Most ASIC design guidelines are available 
from ARM. 


e Printed-circuit board design guidelines. 


e The header connector and signals that should be provided by an ARM7/ 
ARM$9 target system. 


e Height restrictions and keep-out requirements. 
e Timing and voltage specifications for trace port signals. 


e Providing support in a target system for JTAG-only debugging. 


16 Agilent Trace Port Analyzer for ARM 


Chapter 1: Target System Design Considerations 
Trace Port Signal Overview 


Trace Port Signal Overview 


The trace port signals consist of all of the signals provided by the ARM 
ETM and also the JTAG run control signals. These two groups of signals 
are combined onto a single connector to save space on the target 
system. 


The trace port signals are described below. 


Signals for Trace Port Analysis 


TRACECLK. The trace clock signal provides the clock for the trace 
port. PIPESTAT[2:0], TRACESYNC, and TRACEPKT{[n-1:0] signals are 
referenced to the rising edge of the trace clock with a single data rate 
trace port. When a double data rate trace port is used, these signals are 
referenced to both the rising and falling edges of TRACECLK. 


PIPESTAT[2:0]. The pipeline status signals provide a cycle-by-cycle 
indication of what is happening in the execution stage of the processor 
pipeline. 


TRACESYNC. The trace sync signal is used to indicate the first 
packet of a group of trace packets and is asserted HIGH only for the 
first packet of any branch address. 


TRACEPKT[n-1:0]. The trace packet signals are used to output 
packaged address and data information related to the pipeline status. 
All packets are eight bits in length, irrespective of the number of trace 
packet signals implemented. There are three cases to consider for how 
trace packets are output on the trace packet signals: 


e 4-Bit TRACEPKT Bus (TRACEPKT[3:0] signals). A packet is output over 
two cycles. In the first cycle, Packet[3:0] is output and in the second cycle, 
Packet[7:4] is output. 


TRACEPKT[1L5:4] signals are unused and should be connected to ground. 


e 8-Bit TRACEPKT Bus (TRACEPKT[7:0] signals). A packet is output in a 
single cycle. 
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TRACEPKT[15:8] signals are unused and should be connected to ground. 


e 16-Bit TRACEPKT Bus (TRACEPKT{[15:0] signals). Up to two packets can 
be output per cycle. If there is only one valid packet, it is output on 
TRACEPKT[7:0] and TRACEPKT[15:8] is unpredictable. If there are two 
packets to output, the first is output on TRACEPKT[7:0] and the second 
on TRACEPKT{15:8]. 


EXTTRIG. EXTTRIG is an optional signal. It is intended to be an input 
to one of the external inputs on the ETM. 


Depending on the design, ETM external triggers may not be available 
on the ASIC’s external pins. In this case, the EXTTRIG has no function, 
and it is recommended that this pin is pulled to a defined state. 


This signal is important for making coordinated measurements with other test 
instruments. 


Signals for both Trace Port Analysis and Run 
Control Interaction 


VTref. The VTref signal is intended to supply a logic-level reference 
voltage to allow debug equipment to adapt to the signaling levels of the 
target board. 


Outputs to target systems will be clamped at VTref on high level 
outputs. Inputs from the target system will be sensed in reference to 
the VTref voltage level. 


VTref does NOT supply operating current to the debug equipment. 


Target boards should supply a voltage that is between 1.65 V and 3.6 V. 
The target board should provide a sufficiently low DC output 
impedance that the output voltage not change by more than 1% when 
supplying a nominal signal current (+ 0.4 mA). 


Debug equipment that connects to this signal should interpret it as a 
signal rather than a power supply pin and not load it more heavily than 
a signal pin. The recommended maximum source or sink current is 
+/-0.4 mA. 
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Signals for Run Control Interaction 


VSupply. The VSupply signal is supplied by the target system. It is 
intended to supply operating current to debug equipment that doesn’t 
have its own power supply. The Agilent Technologies E5904B Option 
300 trace port analyzer is self-powered; it does not use the VSupply 
signal. 


nTRST. The nTRST signal is actively driven by the run control unit to 
the Reset signal on the target JTAG port. 


Target board logic must ensure that there is a low pulse on the target ASIC’s 
nTRST pin at power up. 


TDI. TDI is the Test Data In signal from the run control unit to the 
target JTAG port. It is recommended that this pin is pulled to a defined 
state. 


TMS. TMS is the Test Mode Select signal from the run control unit to 
the target JTAG port. This pin must be pulled up on the target so that 
the effect of any spurious TCKs when there is no connection is benign. 


TCK. TCK is the Test Clock signal from the run control unit to the 
target JTAG port. It is recommended that this pin is pulled to a defined 
state. 


RTCK. RTCK is the Return Test Clock signal from the target JTAG 
port to the run control unit. Some targets, such as ARM7TDMI-S, must 
synchronize the JTAG port to internal clocks. To assist in meeting this 
requirement, you can use a returned (and re-timed) TCK to 
dynamically control the TCK rate. Target systems that don’t require 
RTCK should tie it to a fixed signal level. 


TDO. TDO is the Test Data Out from the target JTAG port to the run 
control unit. 


nSRST. This is an open collector output from the run control unit to 
the target system reset. This is also an input to the run control unit so 
that a reset initiated on the target may be reported to the debugger. 


This pin should be pulled up on the target to avoid unintentional resets 
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when there is no connection. 


DBGRQ. The DBGRQ signal is used by the run control unit as a debug 
request signal to the target processor. It is recommended that this pin 
is pulled to a defined state. 


This signal is rarely implemented as a pin on the ASIC. This pin should 
be pulled low on the target to avoid unintentional debug requests when 
there is no run control unit connected. 


If it is implemented, the DBGRQ signal can be used to enter debug 
mode after receiving a signal from another test instrument on the trace 
port analyzer’s “Break In” SMB port. For example, a logic analyzer’s 
triggering capability can be used for complex breakpoints. 


DBGACK. The DBGACK signal is used by some run control units to 
detect entry or exit from the debug state. This signal is rarely 
implemented as a pin on the target ASIC. 


If DBGACK is available, the trace port analyzer’s “Trigger Out” SMB 
port signal can be used to tell other test instruments when the 
microprocessor has stopped executing program code. 
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ASIC Design Guidelines 


ASIC Pad Selection and Placement 


The position and type of pad selected is based on the following factors: 
e Minimizing noise and coupling between trace and other signals. 
e Ability to drive the external load. 


It has been shown that the quality of the TRACECLK signal, as 
observed by the trace port analyzer, has the greatest effect on the 
reliability of the system. This is because it is vital that TRACECLK 
transition move cleanly through the threshold region of the input 
circuitry of the trace port analyzer, without glitches or ringing. 


It has been observed that with certain types of package and pin 
placement the signal coupling between the trace data signals and the 
trace clock can be significant. If this is observed to be a problem during 
simulations, it is recommended that GND or static I/O signals are 
placed on both sides of the TRACECLK signal. 


Contact ARM for other ASIC design considerations. 
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Printed-Circuit Board Design Guidelines 


Two cases need to be considered: 


e A dedicated trace port. The trace port analyzer is the only load on the 
trace port signals. 


e Ashared trace port. The trace pins are shared with other functions; 
therefore, there are stubs on the printed-circuit board tracks of the 
development board, and there is an increased load on the output driver. 


Dedicated Trace Port 


This is the preferred way to connect a trace port analyzer to a trace 
port. With the trace port analyzer being the only load on the nodes 
connected to target ASIC pins, the main concern is signal integrity at 
the trace port analyzer connector. If you know the characteristics of 
your printed-circuit board tracks, use the actual trace impedance and 
propagation delay. 


If you do not have access to this information, a rough rule of thumb for 
microstrip (trace on outer layer over a ground plane) on FR4 printed- 
circuit board is a propagation speed of 63 ps/cm (160 ps/inch). The 
impedance of a 0.127 mm (0.005) inch wide trace as a microstrip is 
from 70 to 75 ® on a typical six-layer foil construction board. The 
impedance of a trace goes down as the width of the trace increases. 


Knowledge of the characteristic impedance and signal edge rates of the 
Embedded Trace Macrocell (ETM) output drivers is necessary for 
proper design of the target system. Also required is the actual setup 
and hold provided by the ASIC ETM outputs with reference to the ETM 
TRACECLK. If you do not know the characteristics of the signals from 
your ASIC, consult your ASIC vendor. The variation between ASIC 
vendors on ETM output drivers and timing make it difficult to provide 
any general rule. 
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Printed-Circuit Board Track Length 


Match all TRACECLK, PIPESTAT[2:0], TRACESYNC, and 
TRACEPKTT[15:0] track lengths between the ASIC and the trace port 
connector within 100 ps. Overall differences of greater than 100 ps in 
track lengths directly impact setup and hold requirements. If the clock 
is delayed compared to the data, the setup specification needs to be 
increased by the additional clock delay. If any data is delayed compared 
to the clock, the additional delay needs to be added to the setup 
requirement. If data paths are such that data has both greater than and 
less than delays compared with the clock, the difference needs to be 
added to both the setup and hold specification. 


Signal Quality 


Reflections, overshoot, and undershoot all need to be minimized to 
ensure accurate data acquisition. The primary variable is the rise time 
of a signal compared to its track length. This is where the minimum 
signal rise and fall time becomes important. 


The following points should be considered: 


1. Ensure the one way propagation time for all tracks is less than 1/3 of signal 
rise time. 


2. If tracks must be longer than 1/3 of the signal rise time, then some form of 
signal termination is required. The recommended method is series 
termination. The series resistor must be placed as close as possible to the 
ASIC pin. The value of this series resistor, when added to the output 
impedance of the signal driver should closely match the impedance of the 
printed-circuit board track. 


3. If series termination cannot be used, add parallel or matched AC 
termination on each signal track at the trace port analyzer target header. 
This requires significantly more power from the ASIC, however, and the 
AC termination needs to closely match the frequency and rise time of the 
terminated signal. In practice, therefore, parallel termination will rarely be 
possible. 


4. Ifthe total track length is one rise time propagation delay or longer in 
length, follow standard high-speed design practices to minimize cross talk 
between the clock and the data signals. 
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Be aware that as the fabrication process for your ASIC improves, your 
output driver will probably improve and your rise and fall times 
decrease. If you are close to violating the requirements of point 1, 
consider adding termination to the signals to ensure continued correct 
operation. 


Note that ASIC output pads that have an output impedance that is matched to 
the printed-circuit board track may be available from your ASIC vendor. If 
these can be used, the signal quality of the trace port signals will be 
significantly improved. 


Shared Trace Port 


Some applications do not have enough pins available for trace; 
therefore, it may be necessary to multiplex trace signals with other 
functions. This has the effect of increasing the load on the trace 
signals, unless a specific trace-only development board can be built. 


When an Embedded Trace Macrocell (ETM) output pin is multiplexed 
with other functions, the addition of the trace port analyzer target 
header can add a stub to the printed-circuit board track on the target 
system. To minimize the effect of the trace port analyzer target header 
on non-trace port analyzer based signal usage and still ensure the 
integrity of the trace measurements, apply the following constraints to 
design of the printed circuit board. 


When the signal does not require termination in normal operation or 
is parallel terminated (this means that a full voltage swing signal 
travels down the track). Ensure that the propagation delay of the stub 


added for the trace port analyzer target header is 1/5 or less of the 
overall rise/fall time of the signal. 


When the signal is series-terminated for normal operation (this 
means that a 1/2 voltage swing signal begins each transition on the 
track and propagates down the track until it is terminated at the 
target node). This case is full of potential problems. The 1/2 voltage 


swing signal can maintain the trace port analyzer input at its threshold 
voltage for longer than the required rise/fall time. You must move the 
trace port analyzer target header to within 1/5 rise time of the target 
end of the track to prevent this. If this is not possible, you must slow 
down the rise and fall times until this requirement can be met. 
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Header Connector Requirements 

The target header is an AMP MICTOR Connector (0.64mm [0.025in]) 
pitch. The header has 38 pins and is organized such that it can handle: 
e up to 16 trace data pins 

e 3 pipeline status pins 

e 1 trace syne pin 

e 1 trace clock pin 

e 1 external trigger pin 

e 1 voltage reference pin 

e 1 voltage supply pin (not used by the trace port analyzer) 


e 9JTAG run control pins 


Recommended Orientation 


The recommended ARM Embedded Trace Macrocell trace port 
connector orientation is displayed in the following diagram. 


Connector Orientation 


Support 
Shroud ~ 
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There are two choices for the target header: a vertical connector, anda 
right angle straddle mount connector. 


The vertical connector is recommended because it can accommodate an 
optional support shroud that provides additional strain relief and thus greater 
reliability. The notch on the support shroud should be placed on the same side 
as the odd numbered pins on the MICTOR connector. The support shroud is 
highly recommended. 


The straddle mount connector should be used when board real estate 
is at a premium and there is no room for the vertical connector. A 
support shroud is not available for use with the straddle mount 
connector. 
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Connector and Support Shroud Part Numbers 


The AMP part numbers for the MICTOR target headers are given below. These 
connectors may be purchased directly from AMP. Support shrouds and kits of 
five MICTOR connectors and support shrouds may be purchased from Agilent. 


AMP MICTOR Headers Available from AMP 


AME Pan Description 

Number P 

2-767004-2 Vertical surface mount connector 
Ground bus lead length 1.397 mm (0.055”) 

767054-1 Vertical surface mount connector 
Ground bus lead length 2.743 mm (0.108”) 

767061-1 Vertical surface mount connector 
Ground bus lead length 3.505 mm (0.138”) 

767044-1 Horizontal straddle mount connector 


Support Shrouds Available from Agilent 


Agilent Part 
Number 


Description 


£5346-44701 
E5346-44704 


E5346-44703 


Vertical support shroud for PCB thickness up to 1.575 mm (0.062”) 


Vertical support shroud for PCB thickness 
from 1.575 mm (0.062”) to 3.175 mm (0.125”) 


Vertical support shroud for PCB thickness 
from 3.175 mm (0.125") to 17.780 mm (0.70”) 


Set of Five MICTOR Connectors and Five Support Shrouds Available from Agilent 


Agilent Part 
Number 


Description 


£5346-68701 


£5346-68700 


Set of 5 MICTOR connectors and shrouds 
For PCB thickness up to 1.575 mm (0.062”) 
Set of 5 MICTOR connectors and shrouds 
For PCB thickness from 1.575 mm (0.062”) to 3.175 mm (0.125”) 
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Connector Dimensions 


AMP MICTOR Connector Dimensions (AMP part # 2-767004-2) 
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Support Shroud Dimensions 


Support Shroud Dimensions 


2.54 mm (0.100 
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Height Restrictions and Keep-Out Requirements 


The Agilent Technologies E5904B Option 300 trace port analyzer 
connects to the target MICTOR header with a small target probe 
(which is the 68-pin cable and a buffer board). The target probe 
connects either vertically or horizontally (right-angle), depending on 
which MICTOR header is on the target system. 


If the vertical header is used, make sure there is sufficient height 
clearance between the target system and the interface boards. 


This section describes the height restrictions and keep-out for target 
probes using the single-processor ETM buffer board (E5903-66507) 
and for target probes using the dual-processor ETM buffer board 
(E5903-66508). 


Single-Processor ETM Buffer Board (E5903-66507 or E5903-66516), Vertical Header, 
and Support Shroud 


2.0 in 0.4 in | je 
50.8 mm 10.3 mm 


Support Shroud 


0.95 in 
24.1 mm 


Target Board 


| 


Target Board 


1.06 in =| | | 0.42 in 
27.0 mm 10.7 mm 
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Single-Processor ETM Buffer Board (E5903-66507 or E5903-66516) and Right Angle 
Connector 


2.0 in : Buffer Board 
50.8mm fi : 


Target Board 


k 2.0 in | 
50.8 mm 
0.28 in 
Buffer Board : 7.0mm 
0.25 in —| }— aie Board 
6.2 mm 
«a Pini 
0.16 in >| |e | 0.16 in 
4.1mm 4.1mm 


Dual-Processor ETM Buffer Board (E5903-66508), Vertical Header, and Support 
Shroud 


2.0 in 0.44 in 
I 50.8 mm d 11.1 mm ke 


Buffer Board 


i_....4-Bit Trace Pact Connestar......: 
Pin1 


¢-Support Shroud 


Target Board 


Target Board 
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Dual-Processor ETM Buffer Board (E5903-66508) and Right Angle Connector 


Ie 2.56 in o| 
65.1 mm 


Buffer Board 7.0mm 


0.25 in —| J Target Board 
6.2 mm A i 


8-Bit 
Trace Port 
Connector : x a : 
4-Bit 4.1mm —| | k 4.1mm 
Trace Port 
Connector 
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Connector Pin-Out 


The Embedded Trace Macrocell (Rev 1) specification from ARM, 
release C or later, defines the following target header pin-outs. If your 
target system has these pin-outs, use the included trace port analyzer 
buffer board. 
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Single-Processor ETM Connector Pin-Out 


The single-processor buffer board (5903-66507) connects to the 
target system header connector on systems that use a single ARM 


processor. 


Target Header Pin-Out for the MICTOR Connector, Single Processor ETM 


Pin Signal Name Pin Signal Name 
38 PIPESTATO 37 TRACEPKT8 
36 PIPESTAT1 35 TRACEPKT9 
34 PIPESTAT2 33 TRACEPKT10 
32 TRACESYNC 31 TRACEPKT11 
30 TRACEPKTO 29 TRACEPKT12 
28 TRACEPKT1 27 TRACEPKT13 
26 TRACEPKT2 25 TRACEPKT14 
24 TRACEPKT3 23 TRACEPKT15 
22 TRACEPKT4 21 nTRST 

20 TRACEPKT5 19 TDI 

18 TRACEPKT6 17 TMS 

16 TRACEPKT7 15 TCK 

14 VSupply 13 RTCK 

12 VTref 11 TDO 

10 EXTTRIG 9 nSRST 

8 DBGACK 7 DBGRO 

6 TRACECLK 5 GND 

4 No Connect 3 No Connect 
2 No Connect 1 No Connect 


Pins 1, 2, 3, and 4 must be true no-connects. For designs with less than 16 
trace data pins, pin 5 and any unused TRACEPKT pins must be connected to 


ground. 
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Dual-Processor ETM Connector Pin-Out 


The dual-processor buffer board (E5903-66508) connects to the target 
system header connector on systems that use a two ARM processor 


cores. 


Target Header Pin-Out for the MICTOR Connector, Dual Processor ETM 


Pin Signal Name Pin Signal Name 
38 PIPESTAT_AO 37 PIPESTAT_BO 
36 PIPESTAT_A1 35 PIPESTAT_B1 
34 PIPESTAT_A2 33 PIPESTAT_B2 
32 TRACESYNC_A 31 TRACESYNC_B 
30 TRACEPKT_AO 29 TRACEPKT_BO 
28 TRACEPKT_A1 27 TRACEPKT_B1 
26 TRACEPKT_A2 25 TRACEPKT_B2 
24 TRACEPKT_A3 23 TRACEPKT_B3 
22 TRACEPKT_A4 21 nTRST 

20 TRACEPKT_A5 19 TDI 

18 TRACEPKT_A6 17 TMS 

16 TRACEPKT_A7 15 TCK 

14 VSupply 13 RTCK 

12 VTref 11 TDO 

10 EXTTRIG 9 nSRST 

8 DBGACK 7 DBGRO 

6 TRACECLK_A 5 TRACECLK_B 
4 No Connect 3 No Connect 

2 No Connect 1 No Connect 


Pins 1, 2, 3, and 4 must be true no-connects. For designs with less than 16 
trace data pins, unused TRACEPKT pins must be connected to ground. 
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Synchronous Trace Ports. The Agilent Technologies E5904B Option 
300 trace port analyzer requires TRACECLK_A and TRACECLK_B 
even when the trace ports are synchronous. ARM recommends that 
you drive these two signals from two separate pins on your ASIC. (This 
has the advantage that you can run the trace ports asynchronously, 
without having to make changes to the printed-circuit board or the 
ASIC pinout.) 


If it is not possible to use separate pins to drive TRACECLK_A and 
TRACECLK_B, you can drive both from the same pin. However, you 
must ensure that the ASIC pad driver is capable of driving the 
increased load and that the printed-circuit board track is series- 
terminated as close as possible to the pin of the ASIC. 


Using the Trace Port Analyzer with ARM ETM 
revisions A or B 


The Agilent E5904B Option 300 Trace Port Analyzer is designed for use with 
ARM ETM revision C or higher. 


If you are using ARM ETM version A or B the MICTOR pinout will be different. 
You will need the Agilent E5903-66516 buffer board. Please send an e-mail 
requesting the E5903-66516 buffer board with your name and address to 
support_col@agilent.com, and one will be sent to you at no charge. 


If you are unsure whether your target header pinout corresponds to ARM 
ETM revision A/B or revision C, compare your pinout to the following table. 
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Pin ARM ETM ARM ETM Pin ARM ETM ARM ETM 
RevisionAorB Revision C RevisionAorB Revision C 

38 PIPESTATO PIPESTATO 37 TRACEPKT12 TRACEPKT8 

36 PIPESTAT1 PIPESTAT1 35 TRACEPKT13 TRACEPKT9 

34 PIPESTAT2 PIPESTAT2 33 TRACEPKT14 TRACEPKT10 

32 TRACESYNC TRACESYNC 31 TRACEPKT15 TRACEPKT11 

30 TRACEPKTO TRACEPKTO 29 VSupply TRACEPKT12 

28 TRACEPKT1 TRACEPKT1 27 VSupply TRACEPKT13 

26 TRACEPKT2 TRACEPKT2 25 EXTTRIG TRACEPKT14 

24 TRACEPKT3 TRACEPKT3 23 VTref TRACEPKT15 

22 TRACEPKT4 TRACEPKT4 21 nTRST nTRST 

20 TRACEPKT5 TRACEPKT5 19 TDI TDI 

18 TRACEPKT6 TRACEPKT6 17 TMS TMS 

16 TRACEPKT7 TRACEPKT7 15 TCK TCK 

14 TRACEPKT8 VSupply 13 RTCK RTCK 

12 TRACEPKT9 Vref 11 TDO TDO 

10 TRACEPKT10 EXTTRIG 9 nSRST nSRST 

8 TRACEPKT11 DBGACK 7 DBGRO DBGRO 

6 TRACECLK TRACECLK 5 DBGACK GND 

4 No Connect No Connect 3 No Connect No Connect 

2 No Connect No Connect 1 No Connect No Connect 


Shaded areas indicate pin assignments that differ from ETM release C. 


For further information contact Agilent Technologies or visit 
www.agilent.com/find/need-help 
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Timing and Voltage Specifications for Trace Port 
Signals 
The signals from the target system must meet certain timing and 


voltage requirements in order for the Agilent Technologies E5904B 
Option 300 trace port analyzer to work correctly. 


Signal Requirements 


tlrise) t(fall) 


Clock, 9) filo oe tla Me — 0.50 Target Vcc 


Sop NS ies —— 0.65 Target Vcc 
oh Na teh, Se Se het ——— 0.50 Target Vec 
ep a ____ 0.35 Target Vec 


t(pulse) 


t(pulse) Data 0.50 Target Vcc 
t(period) 
Clock Timing Data Timing 


Signal Requirements 


Maximum state clock frequency, single 200 MHz (1.65 Volts to 3.6 Volts Target 


edge (single clock mode) VTref) 

t(period) = 1/frequency 5 ns 

Maximum state clock frequency, both 120 MHz (1.65 Volts to 3.6 Volts Target 
edges (half clock mode) VTref) 

t(period) = 1/frequency 8.3 ns 

Minimum clock pulse width, t(pulse) 2 ns (see note 1) 


Maximum clock/data rise and falltime, 3.6 ns (see note 1) 
t(rise) and t(fall) 


Minimum clock/data rise and fall time See PCB guidelines 


Data setup/hold times, t(su)/t(h) 1.5/1.0 ns (see notes 2 and 3) 


NOTES: 

1. Clock/data rise and fall times are measured between 35% and 65% of Target 
VTref or + 30% of programmed threshold. 

2. Setup/hold is measured at Target VTref/2 or at programmed threshold. 

3. For “both edge” clocking, setup/hold must be met for both rising and falling edge 
of clock. 
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Buffer Board—Required Voltage Levels 


Absolute Maximum Ratings Minimum Maximum 
Target VTref -0.5V 46V! 
Clock and Data -05V 46V! 
Input Current -50 mA 


(Input < -0.05 V) 


' Minimum voltage can be exceeded if maximum current rating is observed. 


Recommended Operating Range Minimum Maximum 
Target VTref 1.65 V 3.6 V 
Clock and Data 0.0V 3.6 V 

DC Electrical Characteristics Minimum Maximum 
Target VTref range 1.65 V 3.6 V 

Vin 0.65 VTref 

Vi 0.35 VTref 
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Loading Effects 


The trace port analyzer connects to the target system via the target probe as 
shown below: 
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Target Probe Equivalent Load 


The trace port analyzer presents the following equivalent load to each 
signal. Target systems must be capable of driving this load and meeting 
the signal requirements given on page 38. 


Trace Port Analyzer Buffer—Equivalent Load Model 


Papees See note. 
_TAAVC16834A 
Signal MICTOR Connector 0.6 inch Trace 
—§ Zo=68 Q Zo=76 Q 
Tpd = 47 ps Tpd = 87 ps 
74AVC16834A 
330 Q 
Input 
6.8 pF —_. Filter 10kQ 
Ground 
NOTE: 


When using the E5903-66507 or E5903-66516 buffer board, TRACECLK 
drives an additional gate. TRACECLK drives only one gate when using the 
E5903-66508 buffer board. See page 5 for buffer board part numbers and 
descriptions. 


Trace port analyzer probe characteristics (including target probe) 
Input resistance (DC) 10 kQ + 5% 

Input capacitance, datainputs 4.0 pF 

Input capacitance, clock input 6.5 pF 


Maximum input voltage (all 3.6 Volts 
inputs) 
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Modeling the Trace Port Analyzer Buffer Board 


The following characteristics can be used to model the trace port 
analyzer buffer board. 


MICTOR Connector 


The MICTOR connector (right-angle plug to right-angle receptacle or 
right-angle plug to vertical receptacle) can be modeled as a 
transmission line with Z = 68 Q and Tpd = 47 ps. 


PC Board 


e The trace port analyzer buffer board has the following characteristics: 
e trace width = 0.127 mm (0.005 inches) 
e trace thickness = 0.0178 mm (0.0007 inches) 
e¢ microstrip trace for TS, ES, BS, DO, and TrcClk signals 
e distance from traces to ground plane = 0.178 mm (0.007 inches) 
e spacing between traces = 0.508 mm (0.020 inches) 
e ground plane thickness = 0.0356 mm (0.0014 inches) 
e trace length = 15.24 mm (0.6 inches) 
e Er=4.8 


or 


e Zo = 76 Q, Tpd = 87 ps 


Input Filter 


In place of the buffer board characteristics, you can use discrete 
models of 330 Q, 6.8 pF, and 10 kQ as shown below. 
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Buffer IC 


Use the IBIS model of a Philips 74AVC16834<A IC in a TSSOP package. 
This model can be found on the Philips Semiconductor web site at: 


http://www.philipslogic.com/support/ibis/avc/ 


The TRACECLK signal is connected to two inputs of the buffer IC on 
the E5903-66507 and the E5903-66516. TRACECLK drives only one 
gate when using the E5903-66508 buffer board. Data signals are only 
connected to one input of the buffer IC. 


Undershoot/Overshoot 


Undershoot must not go below -0.5 V at the input of the buffer IC. 
Overshoot must not go above 4.6 V at the input of the buffer IC. 
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Supporting JTAG-Only Debugging 


There are special situations in which the target system designer may 
want to provide a separate run control (JTAG) header in addition to 
the MICTOR connector described in this document. 


Including a Separate Run Control-Only (JTAG ) 
Header 


On a given design, some debug seats will use ARM ETM trace and JTAG run 
control. Other debug seats will use JTAG only. 


Because the MICTOR connector is not compatible with most JTAG-only 
debug tools, the JTAG-only seats need some other way to connect to 
the target system. 


In this case, the target board needs to provide a separate, run control- 
only (JTAG) header in addition to the MICTOR connector described in 
this document. This allows JTAG-only debug of the target board. The 
recommended header for the separate, JTAG-only connector is a 
medium-density 2 rows by 10 pins connector: 3M part number 2520- 
6002. JTAG signals may be routed to both the JTAG and MICTOR target 
headers; however, the two headers should be as close as possible to 
one another in order to avoid long signal paths and long stubs. 
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JTAG Run Control Connector Pin-Out 


VTref 1 
nTRST 3 
TDI5 
TMS 7 


TCK 9 
RTCK 11 


TDO 13 
nSRST 15 
DBGRQ 17 
DBACK 19 


O 


OODO0O0O0000 


OODODOO0O000 


2 VSupply 
4 GND 
6 GND 
8 GND 
10 GND 
12 GND 
14 GND 
16 GND 
18 GND 
20 GND 


For complete information on designing a JTAG run control connector 
into your target system, see the document titled Target Requirements 
for ARM Logic Analysis and ARM7TDMI/ARM9 Distributed 
Emulation Tools on the web at: 


http://www.tm.agilent.com/classes/MasterServlet?view=manual&man- 
ItemID=1000001216&language=eng&locale=US 
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Chapter 2: Connecting to a Power Source 


To connect the power supply 


The trace port analyzer is shipped from the factory with a power 
supply and cord appropriate for your country. If the cord you received 
is not appropriate for your electrical power outlet type, contact your 
Agilent Technologies sales and service office (see “Contacting Agilent 
Technologies” on page 161). 


WARNING: Use only the supplied Agilent Technologies F1044B power supply and cord. 
Failure to use the proper power supply could result in electric shock. 


CAUTION: Use only the supplied Agilent power supply and cord. Failure to use the 
proper power supply could result in equipment damage. 


1 Install the ferrite on the 12 V power cord, near the end which 
plugs into the trace port analyzer. 


2 Connect the power cord to the power supply and to a socket 
outlet. 
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3 Connect the 12 V power cord to the back of the trace port 
analyzer. 


Ensure the power supply plug is completely seated in the power input 
receptacle. 
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To turn power ON 


This procedure is for the trace port analyzer before it has been 
connected to a target system. (For the power ON procedure when 
connecting to a target system, see Chapter 6, “Connecting to a Target 
System,” on page 101.) 


1 Turn ON the trace port analyzer power switch. 


To turn power OFF 


This procedure is for the trace port analyzer before it has been 
connected to a target system. (For the power OFF procedure when 
connected to a target system, see Chapter 6, “Connecting to a Target 
System,” on page 101.) 


1 Turn OFF the trace port analyzer power switch. 
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Chapter 3: Connecting to a LAN 


Before a debugger can communicate with the trace port analyzer, the 
trace port analyzer must be connected to the LAN and set up with the 
proper LAN parameters. 


The trace port analyzer has an IEEE 802.3 Type 10/100Base-TX LAN 
connector and is compatible with both 10 Mbps (LOBASE-T) and 100 
Mbps (100BASE-TX) twisted-pair ethernet LANs. (The trace port 
analyzer automatically negotiates the data rate for the LAN it is 
connected to.) 


If the trace port analyzer is already active on the LAN and you wish to change 
its LAN parameters, you can use a “telnet” command on a networked 
computer to connect to the trace port analyzer; then, use the built-in “lan” 
command to change LAN parameters. 


After making LAN parameter changes, you must cycle power to the trace port 
analyzer before the changes take effect. Doing this will break the network 
connection and end the telnet session. 
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Step 1. Decide on the LAN setup method 


The trace port analyzer can be set up on the LAN (in other words, its 
LAN parameters can be configured) in two ways: 


e ByaDHCP (Dynamic Host Configuration Protocol) server that responds to 
BOOTP requests. 


e By using a computer with terminal emulation software (or by using an 
actual terminal) connected to the trace port analyzer’s serial (RS-232) 
port, and by entering commands to set the LAN parameters. 


What is DHCP? 


DHCP (Dynamic Host Configuration Protocol) allows clients (like the 
trace port analyzer) to obtain LAN parameters automatically from a 
server. 


How does the trace port analyzer use DHCP? 


The trace port analyzer uses “static allocation” (sometimes called 
“manual allocation”) to obtain a permanent IP address. Every time the 
trace port analyzer is turned on, it sends out a BOOTP request packet. 
If the DHCP server on the network responds to BOOTP requests and 
has been configured to reply to the trace port analyzer’s link-level 
address, it will respond with the IP address and other LAN parameters. 


The trace port analyzer does not support “automatic allocation”, which 
permanently allocates IP addresses from a pool of addresses. 


Nor does the trace port analyzer support “dynamic allocation” of IP 
addresses—it does not track lease duration and request a new IP 
address when the lease is about to expire. 
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How does DHCP interact with other methods of 
setting LAN parameters? 


Every time the trace port analyzer is turned ON, it sends out a BOOTP 
request packet (even if the LAN parameters have already been 
configured). As long as the DHCP server is configured to reply to 
BOOTP requests from the trace port analyzer’s link-level address, it 
will respond with the IP address and other LAN parameters. 
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Step 2. Set the trace port analyzer’s LAN 
parameters 


Find out whether port numbers 6470 and 6471 are already in use 
on your network and if that use constitutes a conflict. 


Computers on the network (running debugger software) communicate 
with the trace port analyzer through two TCP service ports. The 
default base port number is 6470. The second port has the next higher 
number (default 6471). 


In almost all cases, the default numbers (6470, 6471) can be used 
without change. If necessary, the base port number LAN parameter can 
be changed (using a serial port connection) if the port numbers 
conflict with some other product on your network. 


To set LAN parameters using DHCP 


If there is a DHCP server on your network which responds to BOOTP 
requests and supports “static allocation” of IP addresses, it can be used 
to set the trace port analyzer’s LAN parameters. 


Ask your system administrator to set up the IP address and other 
LAN parameters for the trace port analyzer on the DHCP server. 


You will need to supply the link-level address of the trace port analyzer. 


The link-level address (LLA) is printed on a label above the LAN 
connector on the trace port analyzer. This address is configured in each 
trace port analyzer shipped from the factory and cannot be changed. 
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To set LAN parameters using a Serial port 
connection 


The Agilent Technologies E5904B Option 300 trace port analyzer has a 
9600 baud RS-232 serial interface with an RJ12 connector. 


The trace port analyzer is shipped with a serial cable (with RJ-12 
connectors on both ends, with 6-wire straight-through connections) 
and an adapter (female RJ-12 to female 9-pin D subminiature). The 
adapter plugs into 9-pin serial ports found on most PCs. 


Serial connections on a workstation 


If you are using a UNIX® workstation as the host computer, you need 
to use a serial device file. If a serial device file does not already exist on 
your host, you need to create one. Once it exists, you need to ensure 
that it has the appropriate permissions so that you can access it. See 
the system documentation for your workstation for help with setting up 
a serial device. 
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Serial connections on a personal computer 


Serial connections are supported on personal computers. (You must 
use hardware handshaking if you will use the serial connection for 
anything other than setting LAN parameters.) 


If you are using a personal computer as the host computer, you do not 
need to set up any special files. 


Get the following information from your local network 
administrator or system administrator: 


e An IP address for the trace port analyzer. 


You can also use a “LAN name” or “hostname” for the trace port analyzer, 
but you must configure it using the integer dot notation (such as 
127.0.0.1). 


e The gateway address. 


The gateway address is an IP address and is entered in integer dot 
notation. The default gateway address is 0.0.0.0, which allows connections 
only on the local network or subnet. If connections are to be made to 
workstations on other networks or subnets, this address must be set to the 
address of the gateway machine. 


e The subnet mask. 


A subnet mask blocks out part of an IP address so that the networking 
software can determine whether the destination host is on a local or 
remote network. It is usually represented as decimal numbers separated 
by periods; for example, 255.255.248.0. 


Connect the serial cable from the host computer to the trace port 
analyzer. 


Use the DB9-to-RJ12 adapter and the serial cable supplied with the 
trace port analyzer. 
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25904606 


3 Start a terminal emulator program on the host computer. 


If you are using a personal computer, the HyperTerminal application in 
Microsoft Windows® will work fine. 


If you are using a UNIX workstation, you can use a terminal emulator 
such as cu or kermit. 
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4 Configure the terminal emulator program for: 
e Communication rate: 9600 baud 
e Data bits: 8 
e Parity: none 
e Stop bits: 1 
e Flow control: none 
5 Turn on power to the trace port analyzer. 


When the trace port analyzer powers up, it sends a version message to 
the serial port, followed by a prompt. 


6 Press the Return or Enter key a few times. 


You should see a prompt such as "p>" or "R>". 


If you don’t see a prompt, refer to “If there are serial port connection 
problems”. 


For information about the commands you can use, enter “?” or “help” at 
the prompt. 


7 Display the current LAN parameter settings by entering the lan 
command: 


R>lan 
lan is enabled 

Link Status is UP 

100BaseTX 

lan -i 15.5.24.116 

lan -g 15.5.23.1 

lan -s 255.255.248.0 

lan -p 6470 

Ethernet Address : 08000909BAC1 
R> 


The Ethernet address, also known as the link level address, is 
preassigned at the factory, and is printed on a label on the trace port 
analyzer. 
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Change the LAN parameters by entering Lan commands using 
the following syntax: 


lan -i <internet> [-g <gateway>] [-p <port>] [-s 
<subnet>] 


The lan command parameters are: 
The IP address which you obtained from your network administrator. 


The gateway address. Setting the gateway address allows access 
outside your local network or subnet. 


This changes the subnet mask. 


This changes the base TCP service port number, normally 6470. 


Do not change the default port numbers (6470, 6471) unless they 
conflict with some other product on your network. The numbers must 
be greater than 1024. If you change the base port, enter the new value 
in the configuration of your debugger (and, for UNIX workstations, in 
the /etc/services file). 


To assign an IP address of 192.6.94.2 to the trace port analyzer, enter 
the following command: 


R>lan -i 192.6.94.2 
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If there are serial port connection problems 


If the trace port analyzer prompt does not appear in the terminal 
emulator window (or terminal display) after pressing the Return or 
Enter key: 


Make sure that you have connected the trace port analyzer to the 
proper power source and that the power switch is on. 


With certain serial (RS-232) port interface cards, connecting to a serial 
port when the trace port analyzer is turned off (or is not connected) 
will hang the personal computer. The only way to get control back is to 
reboot the computer. Therefore, we recommend that you always turn 
on the trace port analyzer before attempting to connect via a serial 
port. 


Make sure the serial cable is connected to the correct serial port 
on your computer (or terminal). 


Make sure you are using the serial cable and adapter which are 
supplied with the trace port analyzer. 


Make sure that you have properly configured the terminal 
emulator (or terminal) data communications settings: 


e¢ Communication rate: 9600 baud 
e Data bits: 8 

e Parity: none 

e Stop bits: 1 


e Flow control: none 
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Step 3. Connect the LAN cable 


e Connect the LAN cable to the connector on the trace port 
analyzer. 


Be sure to use the appropriate Category 3 or Category 5 cable for your 
LAN. 
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Step 4. Cycle power on the trace port analyzer 


1 Cycle power on the trace port analyzer by powering it off then on 
again. 


When using DHCP, you must cycle power in order for the trace port 
analyzer to send out a DHCPDISCOVER packet so that its LAN 
parameter settings can be set automatically by a server. 


When using a serial connection, you must cycle power in order for the 
trace port analyzer’s LAN parameter changes to take effect. 


2 Wait at least 20 seconds for the trace port analyzer to recognize 
the LAN. 


3 To verify that the trace port analyzer is now active and on the 
network, follow the instructions in the “Communicating with the 
Trace Port Analyzer” chapter. 
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Chapter 4: Entering Commands 


After the trace port analyzer has been connected to the LAN, there are 
two things you must do before you can configure the trace port 
analyzer: 


e You must establish communications to the trace port analyzer from a 
networked computer. 


e You must learn how to enter commands using the trace port analyzer’s 
built-in command interface. 


66 Agilent Trace Port Analyzer for ARM 


Chapter 4: Entering Commands 
Establishing Communications over the LAN 


Establishing Communications over the LAN 


Once the trace port analyzer has been connected to the LAN, it can 
communicate with computers on the network. 


To use debugger software 


The Agilent Technologies E5904B Option 300 trace port analyzer can 
be used with several third-party debuggers. 


Debuggers typically provide some way to enter commands in the trace 
port analyzer’s built-in command interface. 


Refer to your debugger’s documentation for information on 
accessing the trace port analyzer’s built-in command interface. 


If the debugger cannot communicate with the 
trace port analyzer 


Some debuggers have an initialization file that needs to be properly 
defined before a debugger can connect to the trace port analyzer. 


Check that the debugger is using the correct IP address for the 
trace port analyzer. 


Refer to your debugger manual for information on specifying the trace 
port analyzer’s IP address. 


Telnet to the trace port analyzer from the same networked 
computer that runs the debugger software (see “To ‘telnet’ to the 
trace port analyzer’). 


If the telnet connection works, check that the debugger has the correct 
IP address for the trace port analyzer. 


If the debugger uses the network hostname for the trace port analyzer 
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(which doesn’t work) and the telnet command uses the network [P 
address (which does work), the problem could be with the name 
server or host table lookup mechanism. If this is the case, try using the 
trace port analyzer’s IP address in the debugger. 


If the telnet connection doesn’t work, refer to “Verifying Trace Port 
Analyzer LAN Communications” in the “Solving Problems” chapter. 


To “telnet” to the trace port analyzer 


Verify your trace port analyzer is now active and on the network 
by issuing a telnet command from a networked computer to the 
trace port analyzer’s IP address. 


$ telnet 192.35.12.6 
R> 
R> 


If you do not see a prompt, press the Return or Enter key a few times. 


This connection will give you access to the trace port analyzer’s built-in 
command interface. 


To enter a command, type it in at the built-in command interface 
prompt, and press the Return or Enter key. 


For example, to view the LAN parameters, enter the “lan” command. 


R>lan 
lan is enabled 
Link Status is UP 
10BaseT 
lan -i 130.29.66.134 
lan -g 130.29.64.1 
lan -s 255.255.248.0 
lan -p 6470 
Ethernet Address: 0030D300A10C 


To exit from the telnet session, type Ctrl+D at the prompt. 
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If you cannot “telnet” to the trace port analyzer 


I Refer to “Verifying Trace Port Analyzer LAN Communications” 
on page 142. 
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Using the Trace Port Analyzer’s Built-In 
Commands 

The trace port analyzer has a built-in command interface which you 
can use for configuring or troubleshooting the trace port analyzer. 
You can access the built-in command interface via: 

e A telnet (LAN) connection. 

e A “debugger command” window in your debugger. 


e A serial connection (as may have been used in “To set LAN parameters 
using a serial port connection” on page 56). 


Command Prompts 


The prompt indicates the status of the trace port analyzer: 


U Running user program 
M Running in debug mode 
p No target power 

R Emulation reset 

r Target reset 

? Unknown state 

X Run control disabled 
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Commonly Used Commands 


Command Description 

b Break—go into the background monitor state. 

cf Configuration—read or write configuration options. 

help Help—display online help for built-in commands 

init Initialize—init-c re-initializes everything in the trace port 
analyzer except for the LAN software. 

lan Configure LAN parameters. 

m Memory—read or write memory. 

reg Register—read or write a register. 

mtest Memory test—test target system memory. 

r Run—start running user code. 

rep Repeat—repeat a command or group of commands. 

rst Reset—reset the target processor. 

iS Step—do a low-level single step. 

tlist Display data captured by the trace port analysis unit. 

trun Start the trace port analysis unit's measurement. 

tstatus Display whether the trace port analysis unit is “running” or 
“stopped”. 

tstop Stop the trace port analysis unit’s measurement. 

ver Version—display the product number and firmware version of the 


trace port analyzer. 


Use ? <command> (or help <command>) to show the command 
syntax and required parameters for each command. For example, enter 
? mtest to show syntax and required parameters for the memory test 
command. 
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To reset the trace port analyzer and break into the monitor, enter: 
R>rst -m 
To set register r0, and then view r0 to verify that it was set, enter: 


M>reg rO=ffff 
M>reg r0 
reg rO=0000ffff 


To break execution and then step a single instruction, enter: 


M>b 

M>s 
PC=XXXXXXXKX 

M> 


To determine what firmware version is installed in the trace port 
analyzer, enter: 


M>ver 


Online Help 
Use help command_name to see the command syntax. 


To get help on the memory command, enter: 


M>help m 


m - display or modify processor memory space 


m <addr> - display memory at address 

m -d<size> <addr> - display memory at address with display size 
m -a<size> <addr> - display memory at address using access size 
m <addr>..<addr> - display memory in specified address range 

m <addr>.. - display 128 byte block starting at address A 
m <addr>=<value> - modify memory at address to <value> 

m -d<size> <addr>=<value> - modify memory with display size 

m -a<size> <addr>=<value> - modify memory using access size 

m <addr>=<value>,<value> - modify memory to data sequence 

m <addr>..<addr>=<value>,<value> - fill range with repeating sequence 


NOTES: For display and access size descriptions see mo command 


Note that some of commands listed in the help screens are generic 
commands and may not be available for your trace port analyzer. 
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Chapter 5: Configuring the Trace Port Analyzer 


After you have established communications between the trace port 
analyzer and networked computer (using debugger or telnet software) 
and learned how to enter commands, you must set the trace port 
analyzer’s configuration options appropriately for the target system. 


Save trace port analyzer configuration settings to a file so they can be 
used to re-configure the trace port analyzer at the beginning of each 
debugger session. 
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Using the Built-In “cf” Command 


You can configure the trace port analyzer using the built-in “cf” and 
“tcf commands. 


Establish communications with the trace port analyzer over the 
LAN. 


You can either telnet from a networked computer or you can use the 
debugger. For more information, refer to “Establishing 
Communications over the LAN” on page 67. 


Debuggers typically provide some way to enter commands in the trace 
port analyzer’s built-in command interface, or they provide a window 
for configuring the trace port analyzer. 


M>cf speed 
cf speed=12MHz 
M> 
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Using the Built-In “cf” Command 


2 Enter the built-in “c£” and “tc£” commands to view the current 
configuration settings. 


Example 


M>cf 


cf 
Gt 
cf 
cf 
cf 
cf 
Gt 
GE 
Gt 
cf 
cf 
cf 
cE 
Gt 
cf 
cf 
cf 


proc=Arm966ES 
reset=auto 
rrt=no 
breakin=rising 
trigout=monhigh 
dbgack=no 
dbgreq=no 
speed=391KHz 
endian=little 
cparea=0x00000020 
comms=off 
vref=external 
thresh=1/2 
fastjtag=no 
hotplug=no 
vcatch=0x00 
monitor=no 


M> tcf 


tcf 
tcf 
tcf 
tcf 
tcf 


bytes per state=2 
clock_mode=single 
time _tags=yes 
rc_disable=no 
message=no 
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3 Enter the “help cf” or “help tcf” command to see a complete list 
of the configuration items that may be set. 


Example M>help cf 
cf - display or set emulation configuration 


cft - display current settings for all config items 
cf <item> - display current setting for specified <item> 
cf <item>=<value> - set new <value> for specified <item> 

cf <item> <item>=<value> <item> - set and display can be combined 


help cf <item> - display long help for specified <item> 
--- VALID CONFIGURATION <item> NAMES --- 

proc - Set type of target processor 

reset - RESET actions 

rrt - Set restriction to real time runs 

breakin - Break in control 

trigout - Trigger out control 

dbgack - Toggle availability of DBGACK 

dbgreq - Toggle availability of DBGREQ 

speed - Set JTAG clock 

endian - Specify big or little endian 

cparea - RAM region used by cpreg command 

comms - Enable/disable debug comms channel polling 

vref - Voltage reference 

thresh - Voltage threshold 


fastjtag - Enable/disable fast debug mode 
hotplug - Enable/disable hot plugging capability 


veatch - Set/display vector catch register for debug trap 
monitor - Enable/disable monitor mode 
M>help tcf 


bytes per state 
tcf bytes per state=1 
The tlist command will output 1 byte of data per state. 
tcf bytes per state=2 - (default) 
The tlist command will output 2 bytes of data per state. 
tcf bytes per state=3 
The tlist command will output 3 bytes of data per state. 


clock_mode 
tcf clock mode=single - (default) 
Trace data is captured on the rising edge of the clock. 
tcf clock mode=half 
Trace data is captured on the rising and falling edges of the clock. 


time tags 
tcf time _tags=no - (default) 
Time tags will not be output in the trace listing. 
tcf time _tags=yes 
Time tags will be output in the trace listing. 


re_ disable 
tcf re disable=no - (default) 
Run control signals are enabled. 
tcf rec disable=yes 
Run control signals are disabled. 
message 
tcf message=no - (default) 
No asynchronous message. 
tcf message=trigger 
Asynchronous message generated when the trace port triggers 
tcf message=complete 
Asynchronous message generated when the trace port completes 
the collection of trace data. 
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4 Tosee amore detailed description of any configuration item, use 
the command “help cf <item>” or “help tcf <item>”. 


Example M>help cf rrt 
Set restriction to real time runs 
cf rrt=no - (default) 


This option does not restrict to real time and will break into 
background temporarily if needed. 


cf rrt=yes 
This option restrict runs to real time which causes any command 


that requires a break to the monitor to be rejected except ‘rst’, 
'bi a, fe" sor a". 


5 Use the cf and tc£ commands to change the configuration 
settings (see “Setting the Configuration Options” on page 79). 


See Also For information on other built-in commands, see “Using the Trace Port 
Analyzer’s Built-In Commands” on page 70. 
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Setting the Configuration Options 


The configuration items must be set appropriately for each target 
system. 


To set the type of ARM processor 


Processor Built-in command 
ARM7TDMI (default) cf proc=Arm7TDMI 
ARM7DI cf proc=Arm7DI 
ARM710T cf proc=Arm710T 
ARM720T cf proc=Arm720T 
ARM740T cf proc=Arm740T 
ARMSTDMI cf proc=Arm9TDMI 
ARM 920T cf proc=Arm920T 
ARM 922T cf proc=Arm922T 
ARM 925T cf proc=Arm925T 
ARM 940T cf proc=Arm940T 
ARM 946ES cf proc=Arm946ES 
ARM 966ES cf proc=Arm966ES 
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To specify whether DBGACK and DBGRQ are 
available 


The Agilent Technologies E5904B Option 300 trace port analyzer for 
ARM will make use of the DBGACK and DBGR@Q signals if they are 
made available on the target system header connector. 


The DBGACK signal allows the trace port analyzer to quickly detect 
entry or exit from debug mode. If the DBGACK signal is available, it 
can be used to drive the trace port analyzer’s “TRIGGER OUT” SMB 
port which can tell other test instruments when the microprocessor 
has stopped executing program code. 


If the DBGRQ signal is available, the trace port analyzer can use it to 
cause the microprocessor to enter debug mode after receiving a signal 
from another test instrument on the trace port analyzer’s “Break In” 
SMB port. In this way, for example, a logic analyzer’s triggering 
capability can be used as a way to set complex breakpoints. 


To make use of these signals, the trace port analyzer must be 
configured correctly. The following cf commands allow the 
specification of whether each signal is connected or not. 


Value Trace Port Analyzer configured for Built-in command 


yes The corresponding signal is cf dbgack=yes 
connected and willbe used by the cf dbgreq=yes 
trace port analyzer. 


no The corresponding signal is not cf dbgack=no 
connected and willnotbe used by cf dbgreq=no 
the trace port analyzer. (Default) 


“To configure the Trigger Out SMB port” on page 92. 
“To configure the Break In SMB port” on page 93 
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To specify whether runs are restricted to real- 
time 


Value Trace Port Analyzer configured for Built-in command 


no Allows commands which break to the monitor. cf rrt=no 
Examples include commands which display 
memory or registers. These commands break 
to the monitor to access the target processor, 
then resume the user program. (Default) 


yes No commands are allowed which break to the cf rrt=yes 
monitor, except “break,” “reset,” “run,” or 
“step.” The processor must be explicitly 
stopped before these commands can be 
performed. 


If your debugger allows displaying or modifying memory or registers 
while the processor is running, you must set “rrt=no” in order to use 
this feature. 
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To specify the JTAG clock speed 


The trace port analyzer must be configured to communicate at a rate 
that is compatible with your target system processor. The JTAG clock 
speed (on the TCK signal) is independent of processor clock speed. 
However, the JTAG clock speed can be configured to match the target 
processor’s clock speed if desired, using the RTCK signal. 


Changing the TCK speed from a value in kHz or MHz to rtck (or vice versa) 
will re-initialize all internal variables including those associated with 
breakpoints and jtagch. 


Value Built-in command 
391K - 40M cf speed=value 
Target processor clock cf speed=rtck 
speed 


The speed value can be a number followed by either K, which indicates 
the value is in kHz; or M, which indicates the value is in MHz. The clock 
can be set to speeds in the range 391 kHz to 40 MHz. Not all values in 
this range are valid; if an invalid speed is entered, the next slower valid 
speed will be used. 


To match the JTAG clock speed to the target system clock 


When the JTAG clock speed is set to “Return Clock” (cf speed=rtck), 
the trace port analyzer JTAG clock will attempt to match the target 
processor’s clock. For this to succeed, the RTCK must be present at the 
header on the target system. 


Entering c£ speed without a value will display the current JTAG 
clock speed. 
Configuring the Debug Port for Maximum Performance 


The performance of the trace port analyzer depends on the speed at 
which it communicates with the target system. Better performance is 
obtained with faster communication speeds. 
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When to decrease TCK speed. Trace port analyzers are configured 
at the factory with a default TCK speed. In most cases, this is equal to 
the maximum allowable speed as specified by the manufacturer. 


Proeessor Manufacturer Spec. Trace Port Analyzer Hi 
Max TCK (MHz) Factory Default TCK (MHz) Max TCK (MHz) 
ARM Design dependent 10 40 


The default speed is suitable for most applications. However, the 
default speed is only valid if: 


1. The processor is running at its full rated speed. 


2. Trace lengths from the processor to the JTAG connector are short (two 
inches or less). 


3. There are no stubs on the JTAG signals. 


In some cases you may need to lower the TCK speed in order for the 
trace port analyzer to communicate reliably with the target system: 


e When the target systems has additional loads on the JTAG lines. 


e When the target system does not quite meet the requirements (as 
described in Chapter 1, “Target System Design Considerations,” on page 
15). 


e When you issue a break command and get the message "Unable to break". 


When to increase TCK speed. Some target systems will allow TCK 
speeds greater than the default. The real maximum speed for a given 
target system can be determined empirically by increasing the speed 
and observing whether the communication to the target is reliable. 


Speeds greater than the default are not officially supported by Agilent 
Technologies or the chip manufacturer. 
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To specify whether TDO is latched for faster 
JTAG clock speeds 


An additional configuration item, "fastjtag", controls when TDO data is 
latched. When "fastjtag" is configured to "yes," the trace port analyzer 
does not comply with JTAG timing parameters; however, this allows 
communication with the target at greater clock speeds provided the 
target does not violate standard JTAG timing parameters. When 
"fastjtag" is set to "yes," the maximum clock speed is 40 MHz. 


Supported clock 


Value Meaning Built-in command 


speeds 
yes TDO is latched late to allow 391 kHz-40MHz__ cf fastjtag=yes 
maximum target clock speed. 
no Complies with JTAG timing 391 kHz-10MHz cf fastjtag=no 
parameters. 


When "fastjtag" is set to "no," 10 MHz is the highest speed you should 
enter using the "cf speed" command. Entering a value greater than 

10 MHz will probably result in communication errors between the trace 
port analyzer and the target system. Enter a speed of 10 MHz or less to 
restore communication between the trace port analyzer and the target. 


“Configuring the Debug Port for Maximum Performance” on page 82. 


84 Agilent Trace Port Analyzer for ARM 


Example 


Chapter 5: Configuring the Trace Port Analyzer 
Setting the Configuration Options 


To specify the endian mode of the target 
system 


Because the ARM7/ARM9 processor is capable of being configured as 
either big-endian or little-endian, the trace port analyzer must be told 
which the target system uses. 


Value Trace Port Analyzer configured for Built-in command 
little Little endian (Default) cf endian=little 
big Big endian cf endian=big 


To specify the coprocessor register RAM 
address 


Reading and writing coprocessor registers requires a small area of 
target system RAM. The content of this RAM is saved before the RAM is 
used and the original content is restored after it is used. The cparea 
configuration item specifies the starting address of an 80 byte block of 
target system memory that must be readable and writable by the trace 
port analyzer. The default address is 0x20. 


To start the cparea at address 0x40, enter: 


cf cparea=0x40 
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To set up and access coprocessor information 

The firmware supports the description and access of coprocessors for 
the ARM core. Use the following commands to describe coprocessors. 
To describe coprocessors: 


cpdesc -d <CP#> <type> <reg> <size> <nbit> <rdbits> 
cpdesc -r <CP#> R <reg> <size> <read0> <readi1> 

cpdesc -r <CP#> W <reg> <size> <write0> <writel> 

cpdesc -r <CP#> B <reg> <size> <read0> <read1i> <write0d> 
<writel> 


To display coprocessor registration: 

cpreg [-r <read0>] <CP#> <reg> 

To set the processor register: 

cpreg -s [-w <write0>] <CPH#> <reg> <valuel> [<value2>] 
To display the description for the specified coprocessor register: 


cpdesc <CP#> - 


Parameter Description 
<CP#> The coprocessor number. 
<type> R, W, or B for read, write, or both. 
<reg> A single register number or range (eg: 1 or 3...6). 
<size> The size of register in bytes (hex). 
<nbit> Bit 22 in an LDC or SDC instruction. 
<rdbits> Bits 15..12 in an LDC or SDC instruction. 
<read0> Bits 7..0 in an MRC instruction. 
<read1> Bits 23..16 in an MRC instruction. 
<writed> Bits 7..0 in an MCR instruction. 
<write1> Bits 23..16 in an MCR instruction. 
NOTE: Entering a “cpdesc” command for a register already specified will overwrite 


previous data. 
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To setup a description of coprocessor 15 read-only register 0 
(ID register) for the ARM720T, enter: 


cpdesc -r 15 RO 4 00 00 
To read CP15 c0, enter: 


cpreg 15 0 


To enable/disable debug communications 
channel polling 


Value Meaning Built-in command 

off Disables polling for the debug cf comms=off 
communications channel. 

on Enables polling for the debug cf comms=on 


communications channel. 


The debug communications channel provides a way for a running 
target system to communicate with a debugger in real-time. 


Generally, your debugger will set this item if it supports the debug 
communications channel, and you can ignore it. 


For more information, refer to your debugger manual. 


Agilent Trace Port Analyzer for ARM 87 


Chapter 5: Configuring the Trace Port Analyzer 
Setting the Configuration Options 


To display/set communications channel 
information 


The following commands will be used by a debugger to setup and use 
the debug communication channel. You can ignore them. 


Command Action 


comm -b Binary data upload (max=128 values). 
Record format: The first 2 bytes indicate the record length in 
bytes. A termination record (0x00, 0x00) follows. 
Example output for 10 words: 
0x0028 (Data for 10 4-byte words) 
0x0000 (Termination record) 


comm -c Displays comms control register status. 
Example Output: 
control=0 Write and read registers are clear. 
control=1 Data written to the comms data read register. 
control=2 Data available in the comms data write register. 
control=3 Data available in both registers. 


comm -d Display comms data buffer (max=128 values) Example output: 
Count=2 
XXXXXXXX 
XXXXXXXX 

comm-m <count>, Modify comms data read register. 

<value0>, 

<value 1>... 


comm -m <count> Number of values to be entered (max=96). 
comm -r Clear the write buffer. 
comm -v Enables verbose messages for data in comms data buffer. 


comm-venable — Enables verbose messages for data in comms data buffer. 
(Same as comm -v.) 


comm-vdisable Disables verbose messages for data in comms data buffer. 
comm -w Display the number of words in the comms write buffer 


See Also For more information on the debug communications channel, see the 
ARM7/ARM9 data sheet. 
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To specify the reset behavior 


The reset configuration item controls what happens when a reset 
occurs. 


Value Trace Port Analyzer configured for Built-in command 


auto A RESET will break into monitor and _—_cf reset=auto 
restore watchpoint registers only 
when watchpoint registers are being 
used. (Default) 


tomon (break) A RESET will break into monitor. cf reset=tomon 
Watchpoint registers will be restored. 
The processor will remain in monitor 
until another command causes it to 


exit. 
touser ARESET will not break into monitor. cf reset=touser 
(continue) Watchpoint registers will not be 

restored. 
restart A RESET will break into monitor. cf reset=restart 


Watchpoint registers will be restored 
and the user program will begin 
running. 


Note that these actions occur only when the RESET signal is not 
asserted. Using the built-in rst command asserts RESET continuously 
until another command causes RESET to be negated. 
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To set up the vector catch register 
(ARM920T/922T/925T/940T/946ES/966ES) 


This configuration item sets and displays the vector catch register, 
which defines which conditions will cause the processor to enter debug 


mode. 

Bit Meaning Built-in command 

7 FRO. cf veatch=value 
6 IRO 

5 

4 D_Abort 

3 P_Abort 

2 SWI 

1 Undef 

0 Reset 

Example To set the vector catch register for SWI and RESET, set it to binary 

00000101: 


cf veatch=0x5 
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To configure the monitor mode 
(ARM946ES/966ES) 


This configuration item controls the monitor mode bit in the debug 
control register. 


Value Meaning Built-in command 

no Clears the monitor mode bit in the cf monitor=no 
debug control register (Default). 

yes Sets the monitor mode bit in the cf monitor=yes 


debug control register. 


Generally, your debugger will set this item if it supports real-time 
debugging. For more information, refer to your debugger manual. 
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To configure the Trigger Out SMB port 


Value The Trigger Out SMB will Built-in command 
fixhigh Always be high cf trigout=fixhigh 
fixlow Always be low cf trigout=fixlow 
monhigh Go high when the processor is cf trigout=monhigh 


running in background (Default) 


monlow Go low when the processor is cf trigout=monlow 
running in background 


trace_high Gohighwhen the trace porttrigger cf trigout=trace_high 
occurs. 


trace_low Golowwhenthetrace porttrigger cf trigout=trace_low 
occurs. 


Other 
Instrument 


Trace Port Analyzer 


Run Control Hsing 
falling 


Unit 


cf breakin 


halt trace_rising bee 
mon_status trace_falling ort 
Target 
System : 
Trace Port monhigh Tri Out 
Analysis monlow a 


cf trigout SMB Port 


Unit 


trig_in 
trig_out 


trace_rising 
trace_falling 


Other 
Instrument 


See Also “To specify whether DBGACK and DBGRQ are available” on page 80. 
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To configure the Break In SMB port 


Value The Break In SMB will Built-in command 

off Inputs to the Break In SMB willbe cf breakin=off 
ignored. 

rising The trace port analyzer will cause a_ cf breakin=rising 


break on a rising edge. (Default) 


falling The trace port analyzer will cause a_ cf breakin=falling 
break ona falling edge. 


trace_rising Arising edge onthe breakinSMB _ cf breakin=trace_rising 
port will cause a low-to-high 
transition on the EXTTRIG signal of 
the ETM connector. 


trace_falling A falling edge onthe breakin SMB cf breakin=trace_falling 
port will cause a low-to-high 
transition on the EXTTRIG signal of 
the ETM connector. 


“To specify whether DBGACK and DBGRQ are available” on page 80. 
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To configure the voltage reference 


The trace port analyzer normally uses the VTref signal on the JTAG 
connector to determine logic high and logic low levels when driving the 
TDI and TCK signals. 


However, you can specify that the trace port analyzer use an internally 
generated voltage reference instead, when: 


e The target system connector does not have the correct voltage on the 
VTref pin. 


e You plan to use the hot plug-in procedure for connecting the trace port 
analyzer to the target system. 


e You have some other non-standard situation. 


Value Meaning Built-in command 


external The voltage reference is generated by the cf vref=external 
target system and is found on the Vref pin of 
the header connector. (Default) 


value The voltage reference of value is generated cf vref=value 
internally by the trace port analyzer. The value 
is anumber followed by either mV, which 
indicates the value is in millivolts, or V, which 
indicates the value is in volts. 


The cf vref=value option should only be used if the core voltage is different 
than that of the Vref signal on the JTAG connector or when the trace port 
analyzer is configured for hot plug-in. Use this option with extreme care, 
because it is possible to damage the target system if the voltage level is chosen 
incorrectly. 
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To specify the run control threshold voltage 


Threshold for run control voltage reference. Voltages above (vref x 


thresh) will be considered logic high and voltages below this level will 
be considered logic low. 


Value Built-in command 
1/2 (Default) cf thresh=1/2 
2/3 cf thresh=2/3 
1/3 cf thresh=1/3 


The threshold voltage for the trace port is fixed at 1/2 of the reference 
voltage. 
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To configure the trace port analyzer for hot 
plug-in 


This configuration item allows the powered-on trace port analyzer to 
be connected to a powered-on, running target system without halting 
processor execution. 


Value Meaning Built-in command 
no The probe works normally (Default). cf hotplug=no 
yes The probe canbe connectedtoarunning cf hotplug=yes 


target without causing the target to halt. 
Because the trace port analyzer cannot 
detect the voltage reference when it is 
not plugged into the target system, the 
cf vref=target voltage command 
must be issued to reset the voltage 
reference after issuing the 

cf hotplug=yes command. 

The voltage reference must be set to the 
target voltage. 


The trace port analyzer speed must not be set to “rtck” when using hot plug-in 
because the processor clock signal that the trace port analyzer is attempting 
to match is only available when the JTAG port is connected. 


Normally the nSRST line is held low, and connecting the JTAG 
connector to the target system causes the processor to reset. The cf 
hotplug configuration item holds the nSRST line at Vref when the trace 
port analyzer is hot plugged to the JTAG connector. 


“To specify the JTAG clock speed” on page 82. 
“Using the Hot Plug-in Procedure” on page 106. 
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To save and restore configuration option 
settings 


The configuration option settings on the preceding pages can be stored using 
the cfsave -s command. The configuration option settings that use the 
“tcf” commands on the following pages will not be saved with the cfsave -s 
command. 


Use the “cfsave -s” command to store all configuration option 
settings in the trace port analyzer’s flash memory. 


Use the “cfsave -r” command to restore the most recently saved 
configuration option settings. 


If the trace port analyzer is re-initialized, it will return to all the default 
configuration option settings. You can use the “cfsave -r” command to 
restore the configuration option setting that were last saved. 
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To specify the amount of data per trace state 


This configuration item tells the trace port analyzer how to present 
captured data to the debugger. 


With a 4-bit trace port, 8 bits of data is output per trace clock when the 
PIPESTAT[2:0] and TRACESYNC data is included. Likewise, on each 
trace clock, 12 bits of data is output with an 8-bit trace port, and 20 bits 
of data is output with a 16-bit trace port. 


Usually, the debugger will set this configuration item appropriately. 


Value Meaning Built-in command 


1 The tlist command will output 1 byte of — tcf bytes_per_state=1 
data per state. 

2 The tlist command will output 2 bytes of _ tcf bytes_per_state=2 
data per state. (Default) 

3 The tlist command will output 3 bytes of tcf bytes_per_state=3 
data per state. 


To specify the clock mode 


This configuration item tells the trace port analyzer about the target 
system’s trace port clocking method. 


The target system’s trace port can be clocked on either the rising edge 
of the processor clock (single edge clock) or both the rising and falling 
edges of the processor clock (double edge clock). 


Value Meaning Built-in command 

single Trace data is captured onthe rising edge tcf clock_mode=single 
of the clock. (Default). 

half Trace data is captured onthe rising and _ tcf clock_mode=half 


falling edges of the clock. 
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To specify use of time tags 


This configuration item tells the trace port analyzer whether to add 
time tags to the trace listing. Time tags indicate the time of a particular 
state in the trace listing relative to the trigger. Time tags record the 
time that the trace data was received by the trace port analyzer, not 
the internal execution time of the processor. 


Value Meaning Built-in command 

no Time tags will not be output inthe trace tcf time_tags=no 
listing. (default) 

yes Time tags will be output in the trace tcf time_tags=yes 
listing. 


To specify whether the trace port analyzer run 
control signals are disabled 


Some users may want to use a probe other than the trace port analyzer 
for run control of the target system. The trace port analyzer’s run 
control signals can be disabled to prevent signal contention between 
the trace port analyzer and the additional run control probe. This gives 
the additional probe run control over the target system. 


To prevent equipment damage, the trace port analyzer run control signals 
must be disabled before connecting the additional probe. 


Value Meaning Built-in command 

no Run control signals are enabled. tcf rc_disable=no 
(default) 

yes Run control signals are disabled. tcf rc_disable=yes 
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To specify when asynchronous messages are 
generated 


The trace port analyzer can generate an asynchronous message when 
the trace port analyzer has been triggered or when the trace port 
buffer is full. This feature is provided for use by the debugger software. 


Value Meaning Built-in command 

no No asynchronous messages are tcf message=no 
generated. 

trigger An asynchronous message is generated tcf message=trigger 


when the trace port triggers. 


complete An asynchronous message is generated tcf message=complete 
when the trace port completes the 
collection of trace data. 
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Chapter 6: Connecting to a Target System 


After the trace port analyzer has been properly configured for the 
target system, you can connect it to the target system and verify its 
operation. You can plug the trace port analyzer into the target system 
using: 


e The normal plug-in procedure. 


e The hot plug-in procedure. 
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Using the Normal Plug-in Procedure 


The normal plug-in procedure, with the trace port analyzer and the 
target system both powered OFF, involves the following steps. 


Step 1. Turn OFF power to the target system. 


Step 2: Turn OFF the trace port analyzer power 
switch. 
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Step 3. Connect the trace port analyzer to the 
target probe 


1 Plug one end of the 68-pin cable into the trace port analyzer. 
2 Plug the other end of the 68-pin cable into the connector on the 
buffer board. 


Trace Port 


Analyzer 
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Step 4. Plug the target probe into the target 
system MICTOR header connector. 


Analyzer “7 


arget Boarc 


Step 5. Turn ON the trace port analyzer power 
switch. 


Step 6. Turn ON power to the target system. 
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Using the Hot Plug-in Procedure 


The hot plug-in procedure, with both the trace port analyzer and the 
target system both powered ON, involves the following steps. 


Step 1. Configure the trace port analyzer for hot 
plug-in 


e See “To configure the trace port analyzer for hot plug-in” on 
page 96. 


Step 2. Connect the trace port analyzer to the 
target probe 


1 Plug one end of the 68-pin cable into the trace port analyzer. 


2 Plug the other end of the 68-pin cable into the connector on the 
buffer board. 
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Step 3. Turn ON the trace port analyzer power 
switch if it is not already ON. 


Under no circumstances should an powered-OFF trace port analyzer be 
connected to a powered-ON target system when performing the hotplug 
procedure. 


Step 4. Set trace port analyzer configuration 


Be sure to set the following configuration items before 
connecting the trace port analyzer to the target system: 


e Processor type (See page 79.) 

e JTAG clock speed (See page 82.) 
e Voltage reference (See page 94.) 
e Hotplug (See page 96.) 


You must set the configuration items before connecting the trace port 
analyzer to the target system to prevent unexpected system behavior. If 
this is not done, the target may go into reset when the trace port 
analyzer is connected, or other unexpected behavior may occur. 
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Step 5. Plug the target probe into the target 
system MICTOR header connector. 


Analyzer ~~ 
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Verifying the Target System Connection 


After the trace port analyzer has been plugged into the target system, 
you should verify that the trace port analyzer works correctly. 


To verify trace port analyzer operation 


Perform some simple tests in the debugger to verify that the 
trace port analyzer is working properly with the target system. 


If the trace port analyzer doesn’t work with the 
debugger 


Most problems are associated with not having the trace port analyzer 
and target system properly configured or initialized. 


Initialize the trace port analyzer and target system so that the 
debugger can connect. 


Refer to your debugger manual for proper initialization. 


If there are target system interaction problems 


See “Verifying Run Control Interaction with the Target System” 
on page 147. 
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Chapter 7: Configuring for Multiple Processor Systems 


The Agilent E5904B Option 300 trace port analyzer supports trace of 
multiple processors through a single JTAG scan chain. The trace port 
analyzer supports JTAG chain connections (TDO to TDI, not star) for 
up to 32 processors. The default configuration is for a single processor. 


Known and Unknown Processors 


In this chapter, “unknown” processor refers to processors in the JTAG 
scan chain which are not explicitly supported by the firmware (driver). 
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To configure the trace port analyzer for 
multiple processor trace 


The jtagch command defines a list of processors for the JTAG scan 
chain. The firmware (driver) that has been loaded into the trace port 
analyzer supports a particular processor or a family of processors (e.g. 
ARM). The JTAG scan chain may contain processors both known and 
unknown by the trace port analyzer firmware. 


Command Syntax 


All processors must be specified in the JTAG scan chain (jtagch) list. 
The command syntax is as follows: 


jtagch <driver link|IR length 1>, 
[driver link|IR length 2], 
[driver link|IR length 3]... 


Values enclosed in <angle brackets> are required, values enclosed in [square 
brackets] are optional. The “!” symbol indicates “or.” 


The first processor in the list is identified as processor 1, the next 
processor is identified as processor 2, etc. A maximum of 32 processors 
(known and unknown) can be specified in the jtagch command. The 
default setting is jtagch a. 


Processors that are recognized by the emulation firmware are 
identified by driver link. Unknown processors are identified by IR 
length. Commas are used to separate processors in the jtagch list. 
The list of processors must contain at least one known processor. 


6699 


The driver link is for the ARM family of processors is “a”. 


The IR length is the processor Instruction Register (IR) length in 
number of bits. 


To display the current list of valid processors, issue the command 
j tagch with no parameters. 
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To direct a command to a specific processor 


The sp command allows you to direct commands and data to and from 
a specific processor. Initially, ifan sp <processor identifier> 
command has not been issued, commands will be sent to the first 
known processor in the JTAG scan chain. Once the sp command has 
been used to address a particular processor, that choice will not change 
until another sp <processor identifier> command is issued or 
a system initialization occurs. The syntax for the sp command is: 


sp <processor identifier> 


The <processor identifier> must be set for a known processor in the 
JTAG scan chain list. 


The sp command without the <processor identifier> will display the 
current processor identifier. 


Numbering of processors for the <processor identifier> term includes 
all known and unknown processors. 


Given the JTAG scan chain: 
jtagcha,a 


To read the registers and memory location 100 in the first processor in 
the list, issue the command sequence: 


sp 1 
reg 
m 100 


To read the registers and look at the emulation status in the second 
processor, issue the command sequence: 


es 
Given the JTAG scan chain: 
jtagch 9,a,a 
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To read the registers and memory location 100 in the second processor, 
issue the command sequence: 


sp 2 
reg 
m 100 


To direct a command to all known (non- 
bypassed) processors 


Some commands can be issued to all know processors. These 
commands are: 


es all Display the emulation status of all known processors 
b all Break into all known processors 
r all Run all known processors 
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Multiple processor system example — one 
known processor and one unknown 


Consider a system of two processors in a serial JTAG chain 
configuration with a single LAN connection to the trace port analyzer. 
The JTAG chain contains one known processor while the other is an 
unknown processor (e.g. a DSP) which has a 9-bit instruction register 
(IR). 


Trace TDI Processor 2 | TDO 
Port |—— je! Processor 1 9-bit IR 
Analyzer BYPASS 

~<a 


To setup this JTAG connection use the following command: 
jtagch a,9 


The above jtagch command says that the first processor is known by a 
driver and it is linked to driver "a." The next processor (Processor 2) is 
not known and has an instruction register length of 9 bits. 


When the proper JTAG scan chain is set up, the trace port analyzer can 
issue commands and access resources for Processor 1 while Processor 
2 is always placed in a bypass mode. The trace port analyzer will issue 
the proper JTAG scan chains so that the commands and data will be 
directed only to Processor 1. The connection will look just like a single 
processor connection. 


To enable Processor 1 breakpoint: 

be -e swbp 

To set a breakpoint for Processor 1 at address 0x1000: 
bp 1000 


Whenever the processor hits a breakpoint the following message is 
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returned: 


!ASYNC_STAT 615! Software breakpoint: 00001000 


Multiple processor system example — two 
known processors, one unknown 


Consider a system of two known processors and one unknown 
processor. The unknown processor has an IR length of 9 bits. 


Trace TDI Processor 2 TDO 
Port /——>/Processor 1 He} 9-bit IR He) Processor 3 
Analyzer BYPASS 


To setup this JTAG scan chain use the following command: 
jtagch a,9,a 


To issue commands to and receive data and messages from Processor 1 
enter the command: 

sp l 

then issue the desired commands. 


To issue commands to and receive data and messages from Processor 3 
enter the command: 

sp 3 

then issue the desired commands. 


To enable Processor 1 breakpoints: 


spl 
be -e swbp 


To set a breakpoint for Processor 1 at address 0x1000: 
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spl 
bp 1000 


To set a breakpoint for Processor 3 at address 0x2000: 
sp 3 


bec -e swbp 
bp 2000 


When processor 1 hits a breakpoint the following message is returned: 


!ASYNC_STAT 615! Software breakpoint: 00001000: 
Processor 1 


When processor 3 hits a breakpoint the following message is returned: 
!ASYNC_STAT 615! Software breakpoint: 00002000: 


Processor 3 


Other asynchronous messages will display the processor number at the end of 
the message only when there is more than one known processor in the JTAG 
scan chain. 
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Getting Execution Trace from Multiple ARM 
Processors 


The following block diagrams show possible setups of a multiple ETM 
system with a trace multiplexer directing the signals to the trace 
connector. The trace multiplexer is implemented on the ASIC or Target 
board. It is not part of the trace port analyzer. 


Collecting Full Trace from a Selected ETM in a Multiple Core 
System 


This setup allows the user to control a multiple core system. The trace 
port analyzer provides run control for all cores, and provides trace 
capability for one full complement of trace port signals (up to 16 trace 
packet signals) from one ETM on the target system. 


The signals that are routed to the trace port analyzer must be 
controlled by a trace multiplexer. It is up to the customer to design, 
implement, and control the trace multiplexer. The trace multiplexer 
will route the signals from the multiple ETMs on the target system to 
the trace port connector on the target board. 


One trace port analyzer and a target probe (68-pin cable and buffer 
board) using the E3459-66507 buffer board are required. 
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Collecting Trace Simultaneously from Two ARM Cores 


This setup allows the user to control a multiple core system and collect 
two traces simultaneously. The master trace port analyzer performs all 
run control functions. The master trace port analyzer also collects 
trace information from one of the ETMs. The slave trace port analyzer 
does not perform run control; it only collects trace information from 
one additional ETM. 


Thirteen trace signals (eight trace packet signals) from the target 
system are connected to the master trace port analyzer and nine trace 
signals (four trace packet signals) from the target system are 
connected to the slave trace port analyzer. 


The master can handle eight trace packet signals. Therefore, the 
multiplexer should direct the ETM that does the most intensive read/ 
write data tracing to the master trace port analyzer. 


The slave ETM is best suited to trace code execution because it is 
configured for only four trace packet signals. 


Two trace port analyzers and a target probe (68-pin cable and buffer 
board) using the E3459-66508 buffer board are required. 


The user must design, implement, and control the trace multiplexer. 
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Chapter 9: Coordinating Measurements with Other Test Instruments 


You can make coordinated measurements when you want to correlate 
real-time trace data from the Embedded Trace Macrocell with data 
captured by other test instruments (for example, a logic analyzer that 
captures data from other parts of your target system). 


The Agilent Technologies E5904B Option 300 trace port analyzer has 
two SMB ports for coordinating measurements with other test 
instruments: 


e Trigger Out SMB port. 
e Break In SMB port. 


126 Agilent Trace Port Analyzer for ARM 


Chapter 9: Coordinating Measurements with Other Test Instruments 


By using the trace port analyzer’s “trigout” and “breakin” configuration 
options, you can route the Trigger Out and Break In signals to either 
the run control unit or to the trace port analysis unit. 


Other 
Instrument 


Trace Port Analyzer 


Run Control SING 
falling 


Unit 


cf breakin 


halt trace_rising aa 
mon_status trace_falling 
Trace Port monhigh Trigger Out 
Analysis monlow . a 
cf trigout SMB Port 


Unit 


trig_in 
trig_out 


trace_rising 
trace_falling 


Other 
Instrument 
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Receiving a Break In Signal from Another Test 
Instrument 


You can use the trace port analyzer’s Break In signal to: 


e Allow another test instrument to halt processor execution (in other words, 
make the run control unit run in its monitor). 


e Allow another test instrument to enable the trace port analysis unit. 


To halt processor execution 


When another test instrument detects a problem, you might want to 
stop processor execution, for example, to examine registers and 
variable values or to begin stepping through processor execution. 


Connect the other test instrument’s output to the trace port 
analyzer’s Break In SMB port. 


Set the trace port analyzer’s “breakin” configuration item to 
either “rising” or “falling” (depending on whether the other test 
instrument outputs a rising edge or a falling edge). 


3 Start the processor’s execution using the run control unit. 


Start the other test instrument’s measurement. 


“To configure the Break In SMB port” on page 93. 
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To specify when to capture trace port data 


When another test instrument detects a problem, you might want to 
see what the processor is executing when the problem occurs. 


Connect the other test instrument’s output to the trace port 
analyzer’s Break In SMB port. 


Set the trace port analyzer’s “breakin” configuration item to 
either “trace_rising” or “trace_falling” (depending on whether 
the other test instrument outputs a rising edge or a falling edge). 


3 Start the trace port analysis unit’s measurement. 


Start the other test instrument’s measurement. 


“To configure the Break In SMB port” on page 93. 
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Driving a Trigger Out Signal to Another Test 
Instrument 


You can use the trace port analyzer’s Trigger Out signal to: 


e Indicate to another test instrument when processor execution stops (in 
other words, when the run control unit is in its monitor). 


e Indicate to another test instrument when the trace port analysis unit’s 
trigger occurs. 


To indicate when processor execution stops 


You might want to do this, for example, to qualify a (synchronous) 
state logic analyzer’s sampling clock so that it captures data only when 
the processor is executing the target program (and not when the 
debugger is using the run control unit to read and write memory 
locations). 


Connect the trace port analyzer’s Trigger Out SMB port to the 
other test instrument’s input. 


> 73 


Set the trace port analyzer’s “trigout” configuration item to either 
“monhigh” or “monlow” (depending on whether the other test 
instrument expects an active high or an active low signal). 


3 Start the other test instrument’s measurement. 


Control the processor’s execution with the run control unit. 


“To configure the Trigger Out SMB port” on page 92. 
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To indicate when the trace port trigger occurs 


You may want to use the trace port analysis unit, for example, to trigger 
other test instruments like oscilloscopes or logic analyzers which are 
looking at other parts of the target system. 


Connect the trace port analyzer’s Trigger Out SMB port to the 
other test instrument’s input. 


2) 73 


Set the trace port analyzer’s “trigout” configuration item to either 
“trace_high” or “trace_low” (depending on whether the other 
test instrument expects a rising edge or falling edge to signal 
when the trigger occurs). 


3 Start the other test instrument’s measurement. 


Run the trace port analysis unit’s measurement. 


“To configure the Trigger Out SMB port” on page 92. 
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Example 


Chapter 10: Updating Firmware 


If there is a newer version of firmware for the Agilent Technologies 
E5904B Option 300 trace port analyzer, you can update it using the 
procedures described in this chapter. 


To display current firmware version 
information 


Use the “telnet” command from a networked computer to access 
the trace port analyzer’s built-in command interface. 


Enter the built-in “ver -a” command to view the version 
information for firmware currently in the trace port analyzer. 


M>ver -a 


Copyright (c) Agilent Technologies, Inc. 1999 
All Rights Reserved. Reproduction, adaptation, or translation without prior 
written permission is prohibited, except as allowed under copyright laws. 


HPE8130A Series Emulation System 
Version: A.01.09 08Mar01 
Location: Generics 


HPE3459B ARM7/9 JTAG Emulator 
Version: A.05.07 12Mar01 


HPE5840B ARM7/9 Trace Port Analyzer 
Version: A.01.00 


To get firmware from the web 


To update the firmware, you must have access to the World Wide Web 
and a personal computer or a workstation connected to your trace port 
analyzer. 


Download the new firmware from the following World Wide Web 
site: 
http://www.cos.agilent.com/probe/ 


Follow the instructions on the web site for installing the 
firmware. 
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To update firmware from a floppy disk 


e Follow the instructions on the README file on the floppy disk. 


The firmware can be installed using either a personal computer or a 
workstation which can read personal computer floppy disks. 
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Chapter 11: Solving Problems 


Problems with the trace port analyzer can occur in: 

e The connection between the trace port analyzer and the debugger. 

e The trace port analyzer itself. 

e The connection between the trace port analyzer and the target system. 
e The target system. 


You can use the procedures in this chapter to identify the source of 
problems. 
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Interpreting the Trace Port Analyzer Status 
Lights 


Power ON Light 


The green LED, to the left of the power switch, is lit when the trace 
port analyzer is connected to a power source and the power switch is 
on. 
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LAN Status Lights 


The yellow LED, on the right side of the connector, indicates LAN 
activity (receive or transmit). 


The green LED, on the left side of the connector, is lit when the LAN 
interface is operating in 100Base-TX mode. 
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Target System Status Lights 


The trace port analyzer uses status lights to communicate various modes and 
error conditions. The following table gives more information about the 
meaning of the power and target system status lights. 


O = LED is off 


@ = LED ison 


Power/Target System Status Lights 


O RST No power to the target system, or trace port analyzer is not 
O DBG connected to the target system 

O RUN 

@ RST Target system is in a reset state 

O DBG 

O RUN 

O RST The target system processor is in Debug Mode 

@ DBG 

O RUN 

O RST The target system processor is executing user code 

O DBG 

@ RUN 

O RST Only boot firmware is good (other firmware has been 

@ DBG corrupted) 

@ RUN 

@ RST The trace port analyzer can no longer control the target 

@ DBG system. Reset the target system; then, initialize the trace port 
@ RUN analyzer. 
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Verifying Trace Port Analyzer LAN 
Communications 


Follow these steps if there are problems establishing LAN 
communications to the trace port analyzer from a debugger or by using 
telnet on a networked computer. 


Step 1. Verify the physical connection 


Make sure that the proper LAN cable is connected. 


e Use a Category 5 cable if your connection is running at 100 Mbps 
(LOOBASE-TX). 


e Use a Category 3 cable if your connection is running at 10 Mbps 
(1OBASE-T). 


With the trace port analyzer powered on, look at the LAN status 
lights to verify that the trace port analyzer is seeing LAN activity. 


See “LAN Status Lights” on page 140. No activity indicates a problem 
with the LAN port or cable. Contact your network system 
administrator. 


Step 2. Use the “ping” command on a 
networked computer 


These instructions assume you are using a personal computer running 


Microsoft® Windows® The procedure for other operating systems is 
slightly different. 


Open an MS-DOS Command Prompt window, or choose 
Start->Run.... 


Enter the “ping” command followed by the IP address of the 
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trace port analyzer. 


C:\WINDOWS>ping 192.35.12.6 
Pinging 192.35.12.6 with 32 bytes of data: 


Reply from 15.6.253.138: bytes=32 time=lms TTL=254 
Reply from 15.6.253.138: bytes=32 time=lms TTL=254 
Reply from 15.6.253.138: bytes=32 time=lms TTL=254 
Reply from 15.6.253.138: bytes=32 time<1l0ms TTL=254 


If ping gets replies from the trace port analyzer (but you are 
unable to telnet to it), try rebooting the trace port analyzer by 
turning its power switch off then on again. 


Problems with trace port analyzer firmware could lead to situations 
where the LAN interface is up and running but you are not able to 
telnet to the trace port analyzer or, if you are able to telnet to the trace 
port analyzer, you are not able to enter commands. 


If there are LAN connection problems 


If the results of the “ping” command shows something like “100% 
packet loss” or “Destination host unreachable”: 


Make sure that you have connected the trace port analyzer to the 
proper power source and that the power light is lit. 


Make sure that you wait for the power-on self test to complete 
before connecting. 


If you have just changed the IP address of the trace port analyzer, 
leave the trace port analyzer powered on and connected to the 
LAN for a few minutes, then try again. 


Some hubs, routers, and hosts maintain tables of IP addresses and link- 
level addresses. It may take a while for these tables to be updated. 
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Make sure that the trace port analyzer’s IP address is set up 
correctly. 


To do this, repeat the steps shown in “To set LAN parameters using a 
serial port connection” on page 56. 


If the trace port analyzer is on a different subnet than the host 
computer, make sure that the gateway address is set up 
correctly. 


The default gateway address of 0.0.0.0 does not allow the trace port 
analyzer to communicate with computers on other subnets. 


If it takes a long time to connect to the network 


Check the subnet masks on the other LAN devices connected to 
your network. All of the devices should be configured to use the 
same subnet mask. 


Subnet mask error messages do not indicate a major problem. You can 
continue using the trace port analyzer. 


If there are many subnet masks in use on the local subnet, the trace 
port analyzer may take a very long time to connect to the network after 
it is turned on. 
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Checking the Initial Trace Port Analyzer Status 


After establishing a telnet connection to the trace port analyzer, an 
initial status prompt of “->” or “?>” indicates a problem. 


If the prompt is “->” 


The "->" prompt indicates that the trace port analyzer is not connected 
to a target probe (which is the 68-pin cable and a buffer board) or that 
the firmware loaded into the trace port analyzer is not compatible with 
its hardware. 


Try one of the following until you get a different prompt: 


If the trace port analyzer is not connected to the target probe, 
connect the target probe and enter the “init -c” command to 
re-initialize. 

Cycle power on the trace port analyzer. (Turn off target system 
power first.) 


Check that the proper firmware is installed by entering the “ver” 
command. 


The proper firmware is installed at the factory but it could accidentally 
be changed. If the firmware is incorrect, refer to Chapter 10, “Updating 
Firmware,” on page 133. 


Run the trace port analyzer performance verification tests to 
make sure it is working correctly. 


Refer to “Running Trace Port Analyzer Performance Verification Tests” 
on page 156. 
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If the prompt is “?>” 


The "?>" prompt indicates that the trace port analyzer is having trouble 
communicating with the target system. The trace port analyzer doesn’t 
know what state the target system is in. 


Follow the procedure in the “Verifying Run Control Interaction 
with the Target System” on page 147. 
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Verifying Run Control Interaction with the 
Target System 


Use the following procedure to verify that the trace port analyzer’s run 
control port is operating properly with the target system. 


Connection to the wrong target system or connection to a target system 
whose pins are connected backward could potentially damage the trace 
port analyzer. 


Step 1. Initialize the trace port analyzer 


Follow the procedure in Chapter 6, “Connecting to a Target 
System,” on page 101. 


Telnet to the trace port analyzer. 


Initialize the trace port analyzer by entering the “init -c” 
command. 


?>init -c 


You can enter this command at any prompt. This command will set the 
default configuration settings and will display the same information as 
the "ver" command. 


The initial prompt can be used to diagnose several common problems. 


If the initial prompt is “R>”, the trace port analyzer is scanning the 
JTAG interface correctly. Go to “Step 2. Configure the trace port 
analyzer” on page 149. 
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If the response is “!ERROR 905!” 


If the response is “!ERROR 905! Driver firmware is incompatible with 
ID of attached device”: 


Make sure the correct firmware is loaded into the trace port 
analyzer. 


See “To display current firmware version information” on page 134. 


If the initial prompt is “p>” 


Make sure that the target system is powered on and that the 
VTref pin on the target system header connector has the proper 
reference voltage. 


If the initial prompt is “M>” 


The processor entered debug mode without the help of the trace 
port analyzer. Is another debugger connected? 


If the initial prompt is “?>” 


Check TCK, TDO, TDI, TMS, and nTRST signals. Check the 
firmware revision. 


Check for the following logic levels on the target system’s debug port. 
The signal names are for the ARM7. 
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Signal Levels with the trace port analyzer in default’ reset state 


Signal Name Level 
Vec/VTref/SPU 1.65 V - 3.6 V2 


TDI Toggling 

TDO Toggling 

TCK ~10 MHz signal 
TMS Toggling 
nSYSRST Low 

DBGACK Low 

DBGREO Low 

nTRST High 


All other pins should be low. 
'Default cf settings 
“Target dependent 


If the run control port signals are okay and the prompt is still “?>”, 
refer to “If the trace port analyzer has problems controlling the target 
system” on page 154. 


Step 2. Configure the trace port analyzer 


Configure the trace port analyzer appropriately for the target 
system. 


See Chapter 5, “Configuring the Trace Port Analyzer,” on page 73. 


If the appropriate configuration options were previously saved with the 
“cfsave -s” command, you can restore them with the “cfsave -r” 
command. 
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Step 3. Enter the reset command 


Enter the “rst” command: 


R>rst 
R> 


The "R>" prompt is a good response that indicates that nRESET is 
working. Go to “Step 4. Enter the run command” on page 150. 


Step 4. Enter the run command 


Enter the “r” command: 


R>r 

U> 

If the prompt after the run command is "U>" with no error messages, 
everything is still working correctly. Go to “Step 5. Enter the break 
command” on page 150. 


Step 5. Enter the break command 


Enter the “b” command: 


U>b 

M> 

If the prompt after the break command is "M>" with no error messages, 
everything is still working correctly. Go to “Step 6. Check register and 
memory access” on page 151. 
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If the prompt is “U>” with error messages 


If you see “!ERROR 608! Unable to break”, make sure the 
processor type configuration option is set correctly. 


If “!KRROR 608! Unable to break” still occurs, reduce JTAG 
communication speed (see page 82). 


Reset (or cycle power on) the target system. 
Make sure you are using the command sequence: 


U>rst 
R>r 
U>b 
M> 


Some ARM chips have problems if JTAG commands are issued while 


0 6b 


the chip is reset. Using the “rst”, “r”, “b” sequence avoids this problem. 


If the problem persists, see “If the trace port analyzer has 
problems controlling the target system” on page 154. 


Step 6. Check register and memory access 


At the "M>" prompt, check register accesses: 


M>reg r0 
reg r0=xXXXxXXXXX 
M>reg r0=12345678 
M>reg r0 
reg r0=12345678 
M> 
If the value read is equal to the value written, the voltage level of the 


chip is probably correct. 
Before checking memory accesses, set caches and translation off. 


For information on doing this, refer to the documentation for the target 
system. 
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Check memory accesses: 


M>m -d4 -a4 0=11111111, 22222222,33333333,44444444 

M>m -d4 -a4 0.. 
00000000 11111111 22222222 33333333 44444444 
00000010 00000000 00000000 00000000 00000000 
00000020 00000000 00000000 00000000 00000000 
00000030 00000000 00000000 00000000 00000000 
00000040 00000000 00000000 OD0D000000 00000000 
00000050 00000000 00000000 00000000 00000000 
00000060 00000000 00000000 00000000 00000000 
00000070 00000000 00000000 00000000 00000000 

M> 


If the values read are equal to the values written, memory is working. 
Go to “Step 7. Run a short program” on page 152. 


If you see memory-related problems 


If the value read is not equal to the value written, it implies that 
the memory controller may not be initialized. 


Be sure the memory controller for your target system is setup 
correctly. 


Step 7. Run a short program 


To more fully test your target, you can load simple programs into 
memory and execute them. 


Modify memory locations to load a short program: 


M>m -d4 -a4 100=e2811001,00000000, eafffffc 
M>reg r1=0 
M> 


In assembly language this is: 


ADD sl er ca ee 28 
NOP 
B 100 
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2 Set the program counter register to the address of the short 


program: 


M>reg pc=100 
M> 


Stepping can fail if memory at the current program counter does not contain a 
valid instruction. 


Step the program; then, check the register contents: 


M>s 

pc=00000104 
M>reg rl 

reg r1=00000001 
M> 


This should return "reg r1=00000001". 
Verify that the register increments after every three steps: 


M>s 3 

pc=00000104 
M>reg rl 

reg r1=00000002 
M> 


If the program does not execute correctly 


If this does not work as described, make sure “cf endian” is set 
correctly for your target, the memory at 100 is read/write memory, and 
that the memory controller is programmed correctly. 
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If the trace port analyzer has problems 
controlling the target system 


The trace port analyzer might be having problems controlling the 
target if you see messages such as: 

“TERROR 608! Unable to break” 

Or the prompt changes to "?>" 


Problems controlling the target can be caused by a variety of 
conditions. Typically the problem is in the configuration of the trace 
port analyzer or the configuration of the target system. 


Try the following to better control your target system: 


Decrease the JTAG communication speed. Some target systems 
need slower speeds to properly communicate. 


Use the c£ speed command (see “To specify the JTAG clock speed” 
on page 82). 


Check the trace port analyzer configuration settings. 


Enter the ¢£ command to display the configuration settings (see 
“Using the Built-In “cf? Command” on page 75). 


Check that the trace port analyzer is not restricted to real-time 
runs. 


If you are using a telnet connection or a debugger command file, use 
the c£ rrt=no command. 


Restricting to real-time runs will not allow you to access memory or 
registers while the target system program is running. By setting this 
option to “no”, you will be able to access the memory and registers 
while the target system program is running. 
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J Check that the target system processor is configured. 


Some devices under test require configuration registers on the 
processor to be initialized before the trace port analyzer can properly 
communicate with the target system. 


For example, some processors need their memory controllers 
initialized. 
To initialize the target processor, either run the target system from 


reset (if you have a BOOT ROM) or define a series of trace port 
analyzer commands to initialize the target system. 


LJ Check that the proper firmware is installed by entering the “ver” 
command (see “To display current firmware version information” 
on page 134). 


The proper firmware is installed at the factory but it could accidentally 
be changed. If the firmware is incorrect, refer to Chapter 10, “Updating 
Firmware,” on page 133. 
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Running Trace Port Analyzer Performance 
Verification Tests 


In addition to the powerup tests, there are several additional 
performance verification (PV) tests available. 


These tests can be performed using either a LAN connection or a serial 
port (RS-232) connection. 


Step 1. Prepare for the performance 
verification tests 


You will need the Agilent E5903-66509 PV board and an SMB cable to 
perform the performance verification tests. The PV board is supplied 

with the Agilent E5904 Option 300 trace port analyzer; the SMB cable 
is not. 


End any debugger sessions. 
Power OFF the target system. 
Power OFF the trace port analyzer. 


Disconnect the trace port analyzer from the target system. 


If the trace port analyzer is not disconnected from the target system and the 
performance verification tests are run, the Target Board Adapter Feedback 
Test can damage components on the target system. 


Connect the E5903-66509 PV board to the 68-pin cable of the 
trace port analyzer. 


Connect an SMB (f) to SMB (f) cable (such as Agilent 16532- 
61601) from the "Break In" connector to the "Trigger Out" 
connector on the trace port analyzer. 


If you aren’t concerned about these signals, you may omit this step and 
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ignore any related test failures. 


7 Turn the trace port analyzer on again. 


Access the trace port analyzer’s built-in command interface. 


If you're using a LAN connection, you can telnet to the trace port 
analyzer from a computer on the network and enter commands (see 
“To “telnet” to the trace port analyzer” on page 68). 


If youre using a serial port (RS-232) connection, you can connect a 
terminal emulator or an actual terminal to the trace port analyzer and 
use it to enter commands (see “To set LAN parameters using a serial 
port connection” on page 56). 


Step 2. Enter the “pv” command 


Options available for the py command are explained in the help screen 
displayed by typing help pvor? pvat the prompt. 


Enter the py 1 command. 


The results on a good system, with the trigger out and break in SMBs 
connected, should look similar to the following. 


p>pv 1 

Testing: HPE8130A Series Emulation System 
Test 1: Powerup PV Results Passed! 
Test 2: Emulation Module Port Feedback Test Passed! 
Test 3: Run Control FPGA Test Passed! 
Test 4: Run Control Clock Test Passed! 
Test 5: Break In and Trigger Out SMB Feedback Test Passed! 

Testing: HPE3459B ARM7/9 JTAG Emulator 
Test 1: Trace Board Feedback Test Passed! 
Test 2: Target Probe Feedback Test Passed! 

PASSED Number of tests: 1 Number of failures: 0 


Copyright (c) Agilent Technologies, Inc. 1999 
All Rights Reserved. Reproduction, adaptation, or translation without prior 
written permission is prohibited, except as allowed under copyright laws. 


HPE8130A Series Emulation System 
Version: A.01.05 Dec 15 2000 
Location: Generics 


HPE3459B ARM7/9 JTAG Emulator 
Version: B.05.05 Dec 06 2000 


HPE5840B ARM7/9 Trace Port Analyzer 
Version: A.01.00 Jan 08 2001 
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If a performance verification test fails, enter the py -v3 1 
command. 


Details of the failure can be seen by entering the “pv” command again 
with a verbose level of 3. 


If the powerup PV results test fails 


Failure of the Powerup PV Results test indicates a hardware problem 
with the trace port analyzer. 


Contact Agilent Technologies for assistance (see “Contacting 
Agilent Technologies” on page 161). 


If the emulation module port feedback test fails 


Failure of the Emulation Module Port Feedback Test indicates a 
hardware problem with the trace port analyzer. 


Contact Agilent Technologies for assistance (see “Contacting 
Agilent Technologies” on page 161). 


This test exercises the hardware which drives the connection to the 
trace port analyzer. 
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If the run control FPGA test fails 


Failure of the Run Control FPGA Test indicates a hardware problem 
with the trace port analyzer. 


Contact Agilent Technologies for assistance (see “Contacting 
Agilent Technologies” on page 161). 


If the trace port analyzer fails this test, it may have been damaged by 
electrostatic discharge through the target cable. To prevent such 
damage in the future, follow standard ESD preventive practices. 


If the run control clock test fails 


Failure of the Run Control Clock Test indicates a hardware problem 
with the trace port analyzer. 


Contact Agilent Technologies for assistance (see “Contacting 
Agilent Technologies” on page 161). 


If the trace port analyzer fails this test, it may have been damaged by 
electrostatic discharge through the target cable. To prevent such 
damage in the future, follow standard ESD preventive practices. 


If the break in and trigger out SMB feedback 
test fails 


If the Break In and Trigger Out SMB Feedback Test fails: 


Make sure you have connected a good cable between the two 
SMB connectors. 


If the cable is good, contact Agilent Technologies for assistance 
(see “Contacting Agilent Technologies” on page 161). 
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If the trace board feedback test fails 


Failure of the Trace Board Adapter Feedback Test indicates a 
hardware problem with the trace port analyzer. 


Contact Agilent Technologies for assistance (see “Contacting 
Agilent Technologies” on page 161). 


If the target probe feedback test fails 


Failure of the Target Probe Feedback Test indicates a hardware 
problem with the trace port analyzer. 


Make sure the target probe (that is, the 68-pin cable and the 
appropriate buffer board) is connected to the trace port analyzer. 


Contact Agilent Technologies for assistance (see “Contacting 
Agilent Technologies” on page 161). 
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Contacting Agilent Technologies 
If the trace port analyzer still does not work after following the 
troubleshooting steps in this chapter: 


Write down the target processor version, the trace port analyzer 
firmware version, and the trace port analyzer model number 
(Agilent Technologies E5904B Option 300). 


Call your nearest Agilent Technologies sales or service office. 


To locate a sales or service office near you, go to the world-wide web 
site: 


http://www.tm.agilent.com 


and select Contact Us. 
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This chapter describes the following characteristics of the Agilent 
Technologies E5904B Option 300 trace port analyzer: 


e Input/output electrical characteristics. 
e Run control unit characteristics. 
e Trace port analysis characteristics. 


e Environmental characteristics. 
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Input/Output Electrical Characteristics 


Trigger Out SMB Port 


With a 50 Q load, a logic high is = 2.0 V, and a lowis < 0.4 V. The output 
function is selectable (see “To configure the Trigger Out SMB port” on 
page 92). 


Break In SMB Port 


Edge-triggered TTL level input, 20 pF, with 4.6 kQ to ground in 
parallel. Maximum input: +5 V to -5 V when the trace port analyzer is 
powered OFF; +10 V to -5 V when the trace port analyzer is powered 
ON. Input function is selectable (see “To configure the Break In SMB 
port” on page 93). 


Communication Ports 


Serial Port 


RJ12 connector (DB9-to-RJ12 adapter and serial cable included). RS- 
232 DCE to 115.2 kbaud. 


IEEE 802.3 Type 10/100Base-TX LAN Port 


RJ-45 connector, is compatible with both 10 Mbps (10Base-T) and 
100 Mbps (100Base-TX) twisted-pair ethernet LANs. 


Power Supply 
Input. 100-240 V, 1.0 A, 50/60 Hz, IEC 320 connector. 


Output. 12 V,3.3A 
CAT I (Mains isolated). 
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Run Control Unit Characteristics 


Processor Compatibility 


The Agilent Technologies E5904B Option 300 trace port analyzer 
supports several ARM7/9 processors. For the complete list, see “To set 
the type of ARM processor” on page 79. 


Electrical Characteristics 


TDO, DBGACK, RTCK Input Characteristics 
1/3 Vref 1/2 Vref 2/3 Vret 
Signal | Symbol 
Min Max Min Max Min Max 
TDO, Vih O.5Vref | 5.1V |0.65 Vref} 51V |) O8Vref | 5.1V 
DBGAC, | vil O1V | 0.2Vref | -01V | 035V | -0.1V | 05 Vref 
RTCK Ib (Bias) +15uA 
Rin 4.7 kQ pullup to Vref 
Cin TDO = 75 pF, DBGACK = 95 pF, RTCK = 80 pF 
VTref, SRST Input Characteristics 
Signal Symbol Min Max 
VTref! Vin 1.65 V 3.6V 
Rin 25 kQ pulldown to ground 
SRST Rin (inactive) 4.7 kQ pullup to Vref 
Rin (active) 12 Q pulldown to ground 
Cout 200 pF 
Vin 5.5V 
'VTref is used to determine the target power status and the reference for input 
threshold and output voltage swings. The trace port analyzer does not draw 
power from this source. 


166 


Agilent Trace Port Analyzer for ARM 


Chapter 12: Characteristics 
Run Control Unit Characteristics 


Output Signal Characteristics 


Signal Symbol Condition 
TDI, TCK, TMS, TRST, Voh/loh 66 Q + 15 Q to Vref 
DBGRO Vol/lol 662415 Qt00.2V 
Output Model 


This is the model of output drive to TDI, TCK, TMS, TRST and DBGRQ. 


Emulation Probe or 
Trace Port Analyzer 


60Q 
Vref 


Probe-to-target Target System 
System Cable JTAG Connector 


2, 


4 JTAG Pin 


Note: Z, = 66 © in the diagram above. 


Ground 


e5900e02.cdr 
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Trace Port Analysis Unit Characteristics 


For the characteristics of the trace port analysis unit, see: 
e “Signal Requirements” on page 38. 

e “Buffer Board—Required Voltage Levels” on page 39. 

e “Loading Effects” on page 40. 
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Environmental Characteristics 


Environmental Characteristics 


Temperature Operating: 
+5 degrees to +40 degrees C 
(+41 to +104 degrees F) 
Non-operating: 
-40 degrees to +70 degrees C 
(-40 to +158 degrees F). 


Relative Humidity 15% to 95% 


Pollution Degree Pollution degree 2: Normally only dry non-conductive 
pollution occurs. Occasionally a temporary conductivity 
caused by condensation may occur. 


Altitude Operating or non-operating: 4600 m (15 000 ft.). 
For indoor use only. 


EMC IEC 61326-1:1997+A1:1998 /EN 61326-1:1997+A1:1998 Performance Criteria 
CISPR 11:1990/EN 55011:1991- Group 1 Class A 
IEC 61000-4-2:1995+A1:1998/ EN 61000-4-2:1995 (ESD 4kV CD, 8kV AD) a See Note 
IEC 61000-4-3:1995 / EN 61000-4-3:1995 (3V/m 80% AM) A 
IEC 61000-4-4:1995 / EN 61000-4-4:1995 (EFT 0.5kV line-line, 1kV line-earth) A 
IEC 61000-4-6:1996 /EN 61000-4-6:1996 (3V 80% AM, power line) A 


Australia/New Zealand: AS/NZS 2064.1 
Canada: ICES-001:1998 


Safety IEC 61010-1:1990+A1:1992+A2:1995 /EN 61010-1:1994+A2:1995 
Canada: CSA C22.2 No. 1010.1:1992 
USA: UL 3111-1:1994 {optional} 


Additional Information: 


The product herewith complies with the requirements of the Low Voltage 
Directive 73/23/EEC and the EMC Directive 89/336/EEC (including 
93/68/EEC) and carries the CE Marking accordingly (European Union). 


Performance Criteria: 
A Pass - Normal operation, no 
effect. 
B Pass - Temporary degradation, 
self recoverable. 
C Pass - Temporary degradation, 
operator intervention required. 
D Fail - Not recoverable, 
component damage. 


Note: 
The target probes (cable plus buffer 
board) are ESD sensitive. Use 
standard ESD preventive practices to 
avoid component damage. 
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NOTE: 


Chapter 13: Service Guide 


To get replacement parts 


The following table lists some parts that may be replaced if they are 
damaged or lost. The part numbers are subject to change. Contact your 
nearest Agilent Technologies sales office for further information (see 
“Contacting Agilent Technologies” on page 161). 


Replacement assemblies 


Part number Description 

0950-3043 Power supply for trace port analyzer (marked F1044B) 
E3483-68700 Power supply ferrite kit 

E5903-61602 68-pin cable 

E5903-66507 ARM buffer board 

E5903-66508 ARM dual ETM buffer board 

E5903-66509 PV board 

E8130-68702 Serial cable and adapter 


See the figure on page 5 for an illustration of most of these replacement parts. 


To exchange a faulty assembly for a repaired 
and tested assembly 


The following item has been set up on the Agilent Technologies 
exchange assembly program. You can exchange a faulty assembly with 
one that has been repaired, calibrated, and performance verified by the 
factory. The cost is significantly less than that of a new assembly. 


Exchange assemblies 


Part number Description 


E5840-69501 Rebuilt trace port analyzer for ARM 
(accessories not included) 
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To return a part to Agilent Technologies for 
service 


Follow the procedures in the “Solving Problems” chapter to make 
sure that the problem is caused by a hardware failure and not by 
configuration or cabling problems. 


Get the address of the nearest Agilent Technologies service 
center. 


See “Contacting Agilent Technologies” on page 161. 


Package the part and send it to the Agilent Technologies service 
center. 


Keep any parts which you know are working. For example, if only a 
cable is broken, keep the trace port analyzer. 


When the part has been replaced, it will be sent back to you. 


The unit returned to you will have the same serial number as the unit 
you sent to Agilent Technologies. 


In some parts of the world, on-site repair service is available. Ask an 
Agilent Technologies sales or service representative for details. 


To clean the instrument 
If the instrument requires cleaning: 
Remove power from the instrument. 


Clean the instrument using a soft cloth that has been moistened 
in a mixture of mild detergent and water. 


Make sure that the instrument is completely dry before 
reconnecting it to a power source. 
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Glossary 


D 


debug port A hardware interface 
designed into a microprocessor that 
allows developers to control 
microprocessor execution, set 
breakpoints, and access 
microprocessor registers or target 
system memory using a tool like the 
emulation probe. 


device under test Another name 
for a target system under 
development. 


H 


hostname A name that is associated 
with the IP address of a device on the 
network. 


I 


IP address An address, in integer 
dot notation (for example, 
15.6.240.253), that is given to a 
device on the network. 


J 
JTAG port See debug port. 


JTAG interface unit See run 
control unit. 


L 
LAN name See hostname. 
N 


N-trace A method for embedded 
processor cores in ASICs to output 
information about program execution 
using relatively few pins on the ASIC. 


R 


run control unit A device that 
connects to a microprocessor’s debug 
port to provide run control features 
like: starting/stopping program 
execution, single-stepping through 
programs, and modifying registers 
and memory contents. 


T 


target system The device under 
test that is being developed and 
debugged. 


threshold voltage The level at 
which voltages above are logic 
“highs” (1) and voltages below are 
logic “lows” (0). 


trace port analyzer A tool that 
collects an N-trace port’s execution 
information and presents it to a 
software debugger. 
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Glossary 


trigger specification A set of 
conditions that must be true before 
the instrument triggers. 
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Index 


Symbols 
IERROR 905!, 148 


Numerics 


1/2 voltage swing, 24 
100% packet loss, 143 
100BASE-TX, 3, 52 
100Base-TX, 140 
1OBASE-T, 3, 52 

12V power cord, 49 

16-Bit TRACEPKT bus, 18 
4-Bit TRACEPKT bus, 17 
50-pin cable, 5 

68-pin cable, 104, 106 


A 


AC termination, 23 

adapter, serial port, 5, 56 

Agilent F1044B power supply, 48 

Agilent Technologies E5904B 
Option 300 trace port analyzer 
for ARM, 2, 5, 6 

Agilent Technologies, contacting, 
161 

AMP MICTOR connector, 25 

ARM ETM and JTAG signals, 18 

ARM ETM ports, 3 

ARM processor, 79 

ARM7/9 microprocessor, 16 

ASIC design guidelines, 21 

ASIC output pads, 24 

ASIC pad drivers, 36 

automatic allocation, 53 


B 

big-endian, 85 

BOOTP request, 53, 54, 55 

branch address, 17 

Break In and Trigger Out SMB 
feedback test, 159 


Break In SMB port, 20, 80, 93, 126, 
128, 129, 165 
breakpoints 
re-initialized, 82 
breakpoints, setting, 2, 4 
buffer board, 5, 104, 106 
characteristics, 42 
equivalent load, 41 
trace port analyzer connection, 
104, 106 
built-in command interface, 68 
built-in commands, 70 


C 


cable, serial, 56 

caches, 151 

cannot break, 154 

capture trace port data, 129 

captured trace data, 4 

Category 3 cable, 62 

Category 5 cable, 62 

cf command, 75 

cfsave -r command, 97, 149 

cfsave -s command, 97, 149 

characteristic impedance, 22 

characteristics, 163 
environmental, 169 

characteristics of printed-circuit 

board tracks, 22 

cleaning the instrument, 173 

clock mode, 98 

clock timing, 38 

code downloading, 2, 4 

command prompts, 70 

commands, entering, 65 

commonly used commands, 71 

communication ports, 165 

communication rate, 59 

communication speeds, 82 

communications channel 

information, 88 
communications over LAN, 67 


complex breakpoints, 20, 80 
configuration options 
saving/restoring, 97 
setting, 79 
configuration registers, 155 
configuring, 73, 80 
connecting to a target system, 101 
connector orientation, 25 
connector, MICTOR, 27 
connector, serial, 165 
contacting Agilent Technologies, 
161 
coordinated measurements, 18, 
119, 125, 126 
coprocessor information, 86 
coprocessor register RAM address, 
85 
correlate trace data, 126 


coupling, 21 
cross talk, 23 
cu, 58 

D 


data bits, 59 

data per trace state, amount of, 98 

data rate for the LAN, 3, 52 

data timing, 38 

DB9-to-RJ12 adapter, 57 

DBGACK signal, 20, 80 

DBGRQ signal, 20, 80 

debug communications channel 
polling, 87 

debug control register, 91 

debug port, 175 

debug request signal, 20 

debug state, 20 

debugger, 2, 4, 6, 67, 138 

debugger command window, 70 

declaration of conformity, 183 

dedicated trace port, 22 

design guidelines, printed-circuit 
board, 22 
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Index 


destination host unreachable, 143 

device file, 56 

device under test, 175 

DHCP (Dynamic Host 
Configuration Protocol), 53 

double data rate, 17, 98 

driver firmware, 148 

driving a trigger out signal, 130 

dual ETM buffer board, 5 

dual-processor ETM connector pin- 
out, 35 

dynamic allocation, 53 


E 


electrical characteristics, 166 

Embedded Trace Macrocell 
(ETM), 16 

specification, 6 

emulation module port feedback 
test, 158 

endian mode, 85, 153 

entering commands, 65 

environmental characteristics, 169 

equivalent load, 41 

establishing communications over 
LAN, 67 

ethernet address, 59 

ETM (Embedded Trace 
Macrocell), 2 

ETM external triggers, 18 

exchange assemblies, 172 

execution flow, 4 

EXTTRIG signal, 18 


F 


fabrication process, 24 
ferrite kit for 50-pin cable, 5 
ferrite, power cord, 5, 48 
firmware version information, 134 
firmware, updating, 133 

from floppy disk, 135 


floppy disk, updating firmware 
from, 135 

flow control, 59 

FR4 printed-circuit board, 22 

requency of operation, 16 

requency of terminated signal, 23 

ront panel lights, 141 

ull voltage swing, 24 


G 


gateway address, 57, 60, 144 
generic commands, 72 

get firmware from the web, 134 
glossary, 175 

GND signals, 21 


H 


halt processor execution, 128 
hardware handshaking, 57 
height restrictions, 30 
high-speed design practices, 23 
host table lookup, 68 
hostname, 57, 67, 175 
hosts, 143 
hot plug-in, 96 

procedure, 106 
hubs, 143 
HyperTerminal, 58 


I 


IBIS model, 43 

IEEE 802.3 Type 10/100Base-TX 
LAN, 3, 52 

in this book, 6 

initial status prompt, 145 

initialization file, 67 

input/output electrical 
characteristics, 165 

instrument, cleaning, 173 

integer dot notation, 57 

IP address, 53, 54, 55, 57, 60, 68, 
142, 143, 175 


J 


JTAG clock speed, 82 

JTAG communication speed, 154 
JTAG interface, 2 

JTAG interface unit, 175 

JTAG port, 175 

JTAG timing parameters, 84 
JTAG-only seats, 44 


K 


keep-out, 30 
kermit, 58 


L 


LAN activity, 140 

LAN cable, 62 

lan command, 52 

LAN communications, verifying, 

142 

LAN interface, 2, 3 

LAN name, 57, 175 

LAN parameters, 52, 53, 54, 55, 68 

LAN port, 165 

LAN status lights, 140 

LAN, connecting to, 51 

lights, 141 

link-level address, 53, 54, 55, 143 
displaying, 59 
location of, 55 

little-endian, 85 

loading, trace port analyzer, 41 

local subnet, 144 

logic analyzer, 126 

logic-level reference voltage, 18 


M 


manual allocation, 53 

matched AC termination, 23 
maximum clock speed, 84 

memory controller, 152, 153 
memory, displaying/modifying, 2, 4 
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Index 


microstrip, 22 

MICTOR connector, 27 

minimum signal rise and fall time, 
23 

model, IBIS, 43 

modeling the trace port analyzer 
buffer board, 42 

monitor mode, 91 

multiplex trace signals, 24 


N 


TRACEPKT, 17 

networked computer, 68 
no-connects, 34, 35 

noise, 21 

normal plug-in procedure, 103 
nRESET signal, 150 

nSRST line, 96 

nSRST signal, 19 

N-trace, 175 

nTRST signal, 19 


O 


one way propagation time, 23 
online help, 72 

other test instruments, 3, 125 
output driver, 24 

output pads, 24 

overshoot, 23 


P 


pad placement, 21 

pad selection, 21 

parallel or matched AC 
termination, 23 

parallel termination, 23, 24 

parity, 59 

performance verification tests, 156 

performance, trace port analyzer, 
82 

personal computer, serial 
connections on, 57 


physical connection, 142 
ping command, 142, 143 
pipeline status signals, 17 
PIPESTAT[2:0] signals, 17 
port number 
changing, 60 
default, 55 
power cord, 48 
power ON light, 139 
power source, 47 
power supply, 5, 48, 165 
ferrite kit, 5 
power supply ferrite, 48 
power switch, 50, 103 
powerup pv results test, 158 
printed-circuit board design 
guidelines, 22 
printed-circuit board track, 23, 24 
probe characteristics, 41 
problems, solving, 137 
processor clock speed, 82 
processor compatibility, 166 
processor execution 
starting/stopping, 2, 4 
stops, 130 
program, single-stepping, 2, 4 
programmed target Vcc override 
mode, 39 
prompts, list of, 70 
propagation delay, 24 
propagation speed, 22 
propagation time, 23 


R 


real-time runs, 80, 81, 154 

receiving a Break In signal, 128 

reference voltage, 18 

reflections, 23 

registers, displaying/modifying, 2, 
4 


release C or later specifications 
from ARM, 33 


replacement assemblies, 5, 172 

replacement parts, 172 

required voltage levels 

trace port analyzer, 39 

reset behavior, 89 

RESET signal, 89 

Reset signal, 19 

restricted to real-time, 81 

return a part, 173 

Return Test Clock signal, 19 

right angle straddle mount 
connector, 26 

rise and fall times, 24 

rise time, 23 

rise/fall time, 24 

RJ12 connector, 56 

routers, 143 

RS-232 serial interface, 56 

RTCK signal, 19 

run control (JTAG) header, 44 

run control clock test, 159 

run control FPGA test, 159 

run control threshold voltage, 95 

run control unit, 2, 3, 4, 127, 130, 
175 

characteristics, 166 
run control, disable, 99 
run control-only (JTAG) header, 44 


S 


safety, 169, 183 
saving/restoring configuration 
option settings, 97 
serial connection, 70 
cable, 56, 57 
verifying, 59 
serial device file, 56 
serial port, 165 
connection, 56 
serial port cable, 5, 56 
series termination, 23, 24, 36 
service guide, 171 
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service ports, 60 
setting the configuration options, 
79 
setup and hold, 22, 23 
requirements, 38 
setup requirement, 23 
shared trace port, 24 
signal coupling, 21 
signal edge rates, 22 
signal integrity, 22 
signal quality, 23 
signal requirements, 38 
trace port analyzer, 38 
signals, 17 
single data rate, 17, 98 
single-processor ETM connector 
pin-out, 34 
six-layer foil construction board, 22 
solving problems, 137 
SPICE analysis, 16 
static allocation, 53, 55 
static I/O signals, 21 
status lights, 139 
status signal, 3 
stop bits, 59 
straddle mount connector, 26 
stub, 24 
stubs, 83 
subnet, 144 
subnet mask, 57, 60 
error messages, 144 
support shroud, 27 
synchronous trace ports, 36 


T 


target header, 25 
pin-out, release C, 33 

target probe, 30 

target probe feedback test, 160 

target system, 138, 175 
connecting to, 101 
connection, verifying, 109 


status lights, 141 
verifying run control interaction, 
147 
target system status lights, 141 
TCK signal, 19, 82, 94, 148 
TCP, 60 
TCP service ports, 55 
TDI signal, 19, 94, 148 
TDO data, 84 
TDO signal, 19, 148 
telnet, 68 
telnet (LAN) connection, 70 
telnet command, 52 
temperature environmental 
characteristic, 169 
temperature specifications, 169 
terminal, 53 
terminal emulation, 53 
terminal emulator program, 58 
termination, 24 
Test Clock signal, 19 
Test Data In signal, 19 
Test Data Out signal, 19 
Test Mode signal, 19 
threshold region, 21 
threshold voltage, 24, 175 
run control, 95 
trace port, 95 
time tags, 99 
timing specifications, 38 
TMS signal, 19, 148 
total track length, 23 
trace board feedback test, 160 
trace clock signal, 17 
trace depth, 3 
trace packet buses, 3 
trace packet signals, 17 
trace packets, 17 
trace port, 2 
trace port analysis unit, 2, 3, 127, 
130 
characteristics, 168 
trace port analyzer, 5, 138, 175 


trace port signals, 16, 17, 38 
trace port threshold voltage, 95 
trace port trigger, 131 

trace state, amount of data per, 98 
trace sync signal, 17 

TRACECLEK signal, 17, 21 
trace-only development board, 24 
TRACEPKT{15:0] signals, 18 
TRACEPKT{15:4] signals, 17 
TRACEPKT{15:8] signals, 18 
TRACEPKT[3:0] signals, 17 
TRACEPKT{[7:0] signals, 17 
TRACEPKT[n-1:0] signals, 17 
TRACESYNC signal, 17 

track length, 23 

printed-circuit board, 23 
translation, 151 

trigger, 4 

Trigger Out SMB port, 20, 80, 92, 
126, 130, 131, 165 

trigger sequence, 4 

trigger signal, 3 

trigger specification, 176 

TRST signal, 148 

twisted-pair ethernet LAN, 3, 52 
type of ARM processor, 79 


U 


unable to break, 83, 151, 154 
undershoot, 23 
updating firmware, 133 

from floppy disk, 135 


vV 


vector catch register, 90 
vertical connector, 26 
vertical header, 30 
voltage reference, 94 
voltage specifications, 38 
VSupply signal, 19 
VTref signal, 18 
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Ww 


web, getting firmware from, 134 
workstation, serial connection on, 
56 
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Agilent’ ~~ DECLARATION OF CONFORMITY 


According to ISO/IEC Guide 22 and CEN/CENELEC EN 45014 


Manufacturer’s Name: Agilent Technologies, Inc. 

Manufacturer’s Address: 1900 Garden of the Gods Road 
Colorado Springs, Colorado 
80907 U.S.A. 


Declares, that the product 


Product Name: Trace Port Analyzer 
Model Number: E5904B (E3483B) 
Product Options: This declaration covers all options of the above product(s). 


Conforms with the following product standards: 


EMC Standard Limit 
IEC 61326-1:1997+A1:1998 / EN 61326-1:1997+A1:1998 
CISPR 11:1990 / EN 55011:1991 Group 1 Class A"! 
IEC 61000-4-2:1995+A1:1998 / EN 61000-4-2:1995 4kV CD, 8kV AD 
IEC 61000-4-3:1995 / EN 61000-4-3:1995 3V/m, 80-1000 MHz 
IEC 61000-4-4:1995 / EN 61000-4-4:1995 0.5kV signal lines, 1kV power lines 
IEC 61000-4-6:1996 / EN 61000-4-6:1996 3V, 0.15-80 MHz 


Canada: ICES-001:1998 
Australia/New Zealand: AS/NZS 2064.1 


Safety IEC 61010-1:1990+A1:1992+A2:1995 / EN 61010-1:1993+A2:1995 
Canada: CSA C22.2 No. 1010.1:1992 


Conformity / Supplemental Information: 


The product herewith complies with the requirements of the Low Voltage Directive 73/23/EEC and the EMC Directive 89/336/EEC 
(including 93/68/EEC) and carries the CE Marking accordingly (European Union). 


"1 The product was tested in a typical configuration with Agilent Technologies test systems. 


Kent) 
Date: 8/24/2000 Name 


Ken Wyatt / Product Regulations Manager 


For further information, please contact your local Agilent Technologies sales office, agent or distributor. 
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Product Regulations 


EMC IEC 61326-1:1997+A1:1998 / EN 61326-1:1997+A1:1998 Performance Criteria 
CISPR 11:1990 / EN 55011:1991— Group 1 Class A 
IEC 61000-4-2:1995+A1:1998 / EN 61000-4-2:1995 (ESD 4kV CD, 8kV AD) A (See Note) 
C € IEC 61000-4-3:1995 / EN 61000-4-3:1995 (3V/m 80% AM) A 
ISM 1-A IEC 61000-4-4:1995 / EN 61000-4-4:1995 (EFT 0.5kV line-line, 1kV line-earth) A 
IEC 61000-4-6:1996 / EN 61000-4-6:1996 (3V 80% AM, power line) A 
@ i019 Australia/New Zealand: AS/NZS 2064.1 


Canada: ICES-001:1998 


Safety IEC 61010-1:1990+A1:1992+A2:1995 / EN 61010-1:1994+A2:1995 
Canada: CSA C22.2 No. 1010.1:1992 
USA: UL 3111-1:1994 {optional} 


Additional Information: 


The product herewith complies with the requirements of the Low Voltage Directive 73/23/EEC and the EMC Directive 89/336/EEC 
(including 93/68/EEC) and carries the CE Marking accordingly (European Union). 


Performance Criteria: 
A Pass - Normal operation, no effect. 
B Pass - Temporary degradation, self- recoverable. 
C Pass - Temporary degradation, operator intervention required. 
D Fail - Not recoverable, component damage. 


Note: 
The target probes (cable plus buffer board) are ESD sensitive. Use standard 
ESD preventive practices to avoid component damage. 


Sound Pressure N/A 
Level 
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Safety 
Notices 


This apparatus has been 
designed and tested in accor- 
dance with IEC Publication 1010, 
Safety Requirements for Mea- 
suring Apparatus, and has been 
supplied in a safe condition. 
This is a Safety Class | instru- 
ment (provided with terminal for 
protective earthing). Before 
applying power, verify that the 
correct safety precautions are 
taken (see the following warn- 
ings). In addition, note the 
external markings on the instru- 
ment that are described under 
"Safety Symbols." 


Warnings 


¢ Before turning on the instru- 
ment, you must connect the pro- 
tective earth terminal of the 
instrument to the protective con- 
ductor of the (mains) power 
cord. The mains plug shall only 
be inserted in a socket outlet 
provided with a protective earth 
contact. You must not negate 
the protective action by using an 
extension cord (power cable) 
without a protective conductor 
(grounding). Grounding one 
conductor of a two-conductor 
outlet is not sufficient protec- 
tion. 


¢ Only fuses with the required 
rated current, voltage, and spec- 
ified type (normal blow, time 
delay, etc.) should be used. Do 
not use repaired fuses or short- 
circuited fuseholders. To do so 
could cause a shock or fire haz- 
ard. 


¢ If you energize this instrument 
by an auto transformer (for volt- 
age reduction or mains isola- 
tion), the common terminal must 
be connected to the earth termi- 
nal of the power source. 


¢ Whenever it is likely that the 


ground protection is impaired, 
you must make the instrument 
inoperative and secure it against 
any unintended operation. 


¢ Service instructions are for 
trained service personnel. To 
avoid dangerous electric shock, 
do not perform any service 
unless qualified to do so. Do not 
attempt internal service or 
adjustment unless another per- 
son, capable of rendering first 
aid and resuscitation, is present. 


¢ Do not install substitute parts 
or perform any unauthorized 
modification to the instrument. 


¢ Capacitors inside the instru- 
ment may retain a charge even if 
the instrument is disconnected 
from its source of supply. 


¢ Do not operate the instrument 
in the presence of flammable 
gasses or fumes. Operation of 
any electrical instrument in such 
an environment constitutes a 
definite safety hazard. 


¢ Do not use the instrument in a 
manner not specified by the 
manufacturer. 


To clean the instrument 


If the instrument requires clean- 
ing: (1) Remove power from the 
instrument. (2) Clean the exter- 
nal surfaces of the instrument 
with a soft cloth dampened with 
a mixture of mild detergent and 
water. (3) Make sure that the 
instrument is completely dry 
before reconnecting it to a 
power source. 


Safety Symbols 


AN 


Instruction manual symbol: the 
product is marked with this sym- 
bol when it is necessary for you 
to refer to the instruction man- 
ual in order to protect against 
damage to the product.. 


J 


Hazardous voltage symbol. 
I 
Earth terminal symbol: Used to 


indicate a circuit common con- 
nected to grounded chassis. 


Agilent Technologies Inc. 
P.O. Box 2197 
1900 Garden of the Gods Road 


Colorado Springs, CO 80901-2197, U.S.A. 


Notices 


© Agilent Technologies, Inc. 
1994 - 2002 


No part of this manual may be 
reproduced in any form or by 
any means (including electronic 
storage and retrieval or transla- 
tion into a foreign language) 
without prior agreement and 
written consent from Agilent 
Technologies, Inc. as governed 
by United States and interna- 
tional copyright laws. 


Manual Part Number 
E5904-97003, May 2002 


Print History 


E5904-97000, December 2000 
E5904-97001, March 2001 
E5904-97002, August 2001 


Agilent Technologies, Inc. 
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Colorado Springs, CO 80907 USA 


Restricted Rights Legend 


If software is for use in the per- 
formance of a U.S. Government 
prime contract or subcontract, 
Software is delivered and 
licensed as “Commercial com- 
puter software” as defined in 
DFAR 252.227-7014 (June 1995), 
or as a “commercial item” as 
defined in FAR 2.101(a) or as 
“Restricted computer software” 
as defined in FAR 52.227-19 
(June 1987) or any equivalent 
agency regulation or contract 
clause. Use, duplication or dis- 
closure of Software is subject to 
Agilent Technologies’ standard 
commercial license terms, and 
non-DOD Departments and 
Agencies of the U.S. Govern- 
ment will receive no greater 
than Restricted Rights as 
defined in FAR 52.227-19(c)(1-2) 
(June 1987). U.S. Government 
users will receive no greater 
than Limited Rights as defined in 
FAR 52.227-14 (June 1987) or 
DFAR 252.227-7015 (b)(2) 


(November 1995), as applicable 
in any technical data. 


Document Warranty 


The material contained in 
this document is provided 
“as is,” and is subject to 
being changed, without 
notice, in future editions. 
Further, to the maximum 
extent permitted by applica- 
ble law, Agilent disclaims 
all warranties, either 
express or implied, with 
regard to this manual and 
any information contained 
herein, including but not 
limited to the implied war- 
ranties of merchantability 
and fitness for a particular 
purpose. Agilent shall not be 
liable for errors or for inci- 
dental or consequential 
damages in connection with 
the furnishing, use, or per- 
formance of this document 
or of any information con- 
tained herein. Should Agi- 
lent and the user have a 
separate written agreement 
with warranty terms cover- 
ing the material in this docu- 
ment that conflict with these 
terms, the warranty terms in 
the separate agreement 
shall control. 


Technology Licenses 


The hardware and/or software 
described in this document are 
furnished under a license and 
may be used or copied only in 
accordance with the terms of 
such license. 


WARNING 


A WARNING notice 
denotes a hazard. It calls 
attention to an operating 
procedure, practice, or 
the like that, if not 
correctly performed or 
adhered to, could result 
in personal injury or 
death. Do not proceed 
beyond a WARNING 
notice until the indicated 
conditions are fully 
understood and met. 


CAUTION 


A CAUTION notice 
denotes a hazard. It calls 
attention to an operating 
procedure, practice, or 
the like that, if not 
correctly performed or 
adhered to, could result in 
damage to the product or 
loss of important data. Do 
not proceed beyond a 
CAUTION notice until the 
indicated conditions are 
fully understood and met. 
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UNIX is a registered trademark 
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registered trademarks of 
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X/Open is a registered trade- 
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trademark of X/Open Company 
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